refactor(auth): temporarily disable scope authorization (#254)

manusa · web-flow · commit 58c47dc95cfa · 2025-08-08T12:46:45.000+03:00
It's unclear how the scopes are going to be populated in the JWT.
Disable scope authorization for the time being.

Signed-off-by: Marc Nuri &lt;marc@marcnuri.com&gt;
diff --git a/pkg/mcp/mcp.go b/pkg/mcp/mcp.go
@@ -62,7 +62,7 @@ func NewServer(configuration Configuration) (*Server, error) {
 		server.WithLogging(),
 		server.WithToolHandlerMiddleware(toolCallLoggingMiddleware),
 	)
-	if configuration.StaticConfig.RequireOAuth {
+	if configuration.StaticConfig.RequireOAuth && false { // TODO: Disabled scope auth validation for now
 		serverOptions = append(serverOptions, server.WithToolHandlerMiddleware(toolScopedAuthorizationMiddleware))
 	}
 

Original file line number	Diff line number	Diff line change
`@@ -62,7 +62,7 @@ func NewServer(configuration Configuration) (*Server, error) {`
`62`	`62`	`server.WithLogging(),`
`63`	`63`	`server.WithToolHandlerMiddleware(toolCallLoggingMiddleware),`
`64`	`64`	`)`
`65`		`- if configuration.StaticConfig.RequireOAuth {`
	`65`	`+ if configuration.StaticConfig.RequireOAuth && false { // TODO: Disabled scope auth validation for now`
`66`	`66`	`serverOptions = append(serverOptions, server.WithToolHandlerMiddleware(toolScopedAuthorizationMiddleware))`
`67`	`67`	`}`
`68`	`68`