Repository navigation

2.x: rebuild on mcp/sdk and OAuth 2.1 support - #1

Merged

steinkel merged 49 commits into

2.next-cake5from

feature/2.1-oauth

Oct 29, 2026

Merged

2.x: rebuild on mcp/sdk and OAuth 2.1 support#1
steinkel merged 49 commits into
2.next-cake5from
feature/2.1-oauth

Commits on Oct 15, 2026
Commits on Oct 16, 2026
- Run the test suite with the oauth plugin and a SQLite database
  ajibarra
  committed
  981124d
- Add the Mcp.auth settings
  ajibarra
  committed
  aa060eb
- Reject non-array and null Mcp.auth values
  ajibarra
  committed
  57fb75d
- Validate MCP access tokens with the oauth plugin of the same app
  ajibarra
  committed
  86391d0
- Protect the MCP endpoint with OAuth tokens and serve its resource metadata
  ajibarra
  committed
  0231683
- Accept JWT access tokens from an external authorization server
  ajibarra
  committed
  f90810e
- Keep token claims out of the top level of the external identity
  ajibarra
  committed
  ed4efd0
- Let McpTestTrait act with scopes and check insufficient_scope
  ajibarra
  committed
  f0cb972
- Add bin/cake mcp check
  ajibarra
  committed
  852031d
- mcp check: report external audiences and verify the metadata route
  ajibarra
  committed
  09117ab
- mcp check: test the unconnected metadata route, reset test state
  ajibarra
  committed
  e9108bf
- Test the whole OAuth flow of a remote MCP client
  ajibarra
  committed
  0bcdfc3
- Document OAuth for the MCP endpoint
  ajibarra
  committed
  f595602
- Fix the external identity example in the OAuth docs
  ajibarra
  committed
  7fdb9c5
- Tidy the external identity example in the OAuth docs
  ajibarra
  committed
  eb233aa
- Fix the OAuth review findings in code and tests
  ajibarra
  committed
  fa94299
- Update the OAuth docs, changelog and CI for the review findings
  ajibarra
  committed
  306e015
Commits on Oct 19, 2026

Commits

Commits on Oct 15, 2026

Commits on Oct 16, 2026

Commits on Oct 19, 2026