Skip to content

Conversation

@bhosmer-ant
Copy link
Contributor

  • Merge auth-server and mcp-server into unified architecture under src/modules/
  • Add configurable auth modes: internal (single process) and external (separate processes)
  • Update example scripts to support OAuth discovery and both auth modes
  • Consolidate OAuth documentation into comprehensive implementation guide
  • Add configuration options for development vs production deployments
  • Support both Redis-backed and in-memory session storage

- Merge auth-server and mcp-server into unified architecture under src/modules/
- Add configurable auth modes: internal (single process) and external (separate processes)
- Update example scripts to support OAuth discovery and both auth modes
- Consolidate OAuth documentation into comprehensive implementation guide
- Add configuration options for development vs production deployments
- Support both Redis-backed and in-memory session storage
- Add rate limiting to prevent DoS attacks on vulnerable routes
- Update package-lock.json to use public npm registry
- Document intentionally permissive CORS for public test server
- Remove health endpoints to match original codebase (no health checks)
- Fix auth server splash page to list all OAuth endpoints
- Update test scripts to check server availability via splash page
@bhosmer-ant bhosmer-ant merged commit a0e0109 into main Oct 14, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants