Skip to content

v0.5.0

Choose a tag to compare

View all tags
@barduinor barduinor released this 03 Nov 22:58
· 6 commits to main since this release
0.5.0
cfa7368
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Release Overview

This PR significantly enhances the MCP server's authentication capabilities by introducing flexible, multi-layered authentication configuration supporting both MCP client-to-server and server-to-Box API authentication scenarios. The changes enable support for OAuth 2.1 with partial Dynamic Client Registration, multiple Box authentication methods (OAuth, CCG, JWT), and various MCP authentication types (OAuth, token-based, none).

Key Changes:

  • Introduced dual authentication model with --mcp-auth-type (client-to-server) and --box-auth-type (server-to-Box API) parameters
  • Added OAuth 2.1 discovery endpoints and partial Dynamic Client Registration for MCP OAuth flow
  • Refactored configuration system with structured AppConfig containing separate configs for server, Box API, MCP auth, and logging
  • Enhanced middleware to support multiple authentication types using pure ASGI for streaming compatibility
  • Added comprehensive authentication documentation covering all configuration scenarios

Full Changelog: 0.4.0...0.5.0

Assets 4
Loading