Skip to content

v3.4.7: Know Your Audience

Latest

Choose a tag to compare

@jlowin jlowin released this 10 Aug 21:17
758397e

FastMCP 3.4.7 restores CIMD private_key_jwt authentication for OAuthProxy deployments at a bare origin. Client assertions are now validated against the exact token endpoint advertised in authorization server metadata, eliminating the doubled-slash audience mismatch.

What's Changed

Security 馃敀

  • Backport CIMD assertion audience fix to v3 by @jlowin in #4799

Docs 馃摎

Full Changelog: v3.4.6...v3.4.7