Chris Farhood 69fe8a9233 security: enforce JWT audience + require sub in token verification ...

Closes the audience-binding gap (RFC 9068): tokens minted by the issuer for a
different resource are now rejected at /mcp, and subject-less tokens are refused.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-07 09:30:09 -04:00

..

ressources

Fork intervals-mcp-server: native OAuth + streamable-HTTP, no monkeypatch

2026-07-04 15:07:46 -04:00

__init__.py

Fork intervals-mcp-server: native OAuth + streamable-HTTP, no monkeypatch

2026-07-04 15:07:46 -04:00

conftest.py

feat(multi-tenant): resolve per-caller credentials in every tool

2026-07-04 19:28:27 -04:00

sample_data.py

Fork intervals-mcp-server: native OAuth + streamable-HTTP, no monkeypatch

2026-07-04 15:07:46 -04:00

test_activities.py

feat(multi-tenant): resolve per-caller credentials in every tool

2026-07-04 19:28:27 -04:00

test_api_client.py

test: raise coverage 64% -> 90% with behavior-focused tests + enforced gate

2026-07-04 18:39:20 -04:00

test_auth.py

security: enforce JWT audience + require sub in token verification

2026-07-07 09:30:09 -04:00

test_credentials.py

feat(multi-tenant): resolve per-caller credentials in every tool

2026-07-04 19:28:27 -04:00

test_crypto.py

feat(multi-tenant): data layer, encryption, and per-request credential resolver

2026-07-04 19:07:10 -04:00

test_custom_items.py

feat(multi-tenant): resolve per-caller credentials in every tool

2026-07-04 19:28:27 -04:00

test_events.py

feat(multi-tenant): resolve per-caller credentials in every tool

2026-07-04 19:28:27 -04:00

test_formatting.py

Fork intervals-mcp-server: native OAuth + streamable-HTTP, no monkeypatch

2026-07-04 15:07:46 -04:00

test_make_intervals_request.py

Fork intervals-mcp-server: native OAuth + streamable-HTTP, no monkeypatch

2026-07-04 15:07:46 -04:00

test_server_setup.py

test: mock uvicorn.run in streamable-http start test (CORS app path)

2026-07-06 22:20:36 -04:00

test_server.py

feat(multi-tenant): resolve per-caller credentials in every tool

2026-07-04 19:28:27 -04:00

test_store.py

feat(multi-tenant): data layer, encryption, and per-request credential resolver

2026-07-04 19:07:10 -04:00

test_tool_auth.py

feat(multi-tenant): resolve per-caller credentials in every tool

2026-07-04 19:28:27 -04:00

test_types.py

test: raise coverage 64% -> 90% with behavior-focused tests + enforced gate

2026-07-04 18:39:20 -04:00

test_validation.py

Fork intervals-mcp-server: native OAuth + streamable-HTTP, no monkeypatch

2026-07-04 15:07:46 -04:00

test_value.py

Fork intervals-mcp-server: native OAuth + streamable-HTTP, no monkeypatch

2026-07-04 15:07:46 -04:00