Skip to content

v0.26.6

Choose a tag to compare

View all tags
@yuanhao yuanhao released this 02 Nov 14:02
· 18 commits to main since this release
v0.26.6
3853442
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Additive release.

  • MCP over HTTP: credentials that change during a session. HttpTransport::with_authorization(Arc<dyn AuthorizationSource>) asks the source for the Authorization value before every request (each POST and the closing DELETE); on a 401 its challenged(&AuthChallenge) may return a new value and the request is sent once more on the same MCP session — an expiring OAuth access token no longer needs a new transport. AuthChallenge carries the status, every WWW-Authenticate, the request and refused() (for collapsing concurrent refreshes). A 403 is never retried. Values are marked sensitive and redacted from quoted server text (#411).
  • McpError::Http carries the server's WWW-Authenticate on 401/403 (err.www_authenticate()), with or without a source.
  • Credential headers set with with_header (authorization, cookie, names with key/token/secret/auth/session) are redacted from quoted server text; User-Agent stays readable.

yoagent-rutis (0.12.0) and yoagent-workers (0.3.0) unchanged.

Assets 2
Loading