Skip to content

v2.1.0-r1

Choose a tag to compare

View all tags
@gusocegodk gusocegodk released this 06 Oct 09:35
· 6 commits to main since this release
v2.1.0-r1
12733e3
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Upstream 2.1.0 plus per-user OAuth for the HTTP transport.

Changes

  • MCP_AUTH_MODE=oauth makes the HTTP transport an OAuth resource server (MCP authorization spec 2025-11-25). Each user signs in with an OIDC provider, and BookStack acts as that user.
  • Access tokens are checked against the issuer's published keys and bound to this server's audience. Each one is exchanged (RFC 8693) for a BookStack token; the token the MCP client sent is never forwarded.
  • Images are tagged <version>-r<revision>, and are built, smoke-tested and pushed on release tags.

Image

ghcr.io/cego/bookstack-mcp-server:2.1.0-r1@sha256:a5314db3bdbc111020b3c4cd69eb976691614d212a489fc59770cffb8f5415aa

linux/amd64, with provenance and an SBOM. Configuration: see "Per-user OAuth" in the README.

Assets 2
Loading