Jacob Magar
cc24f1ec62
feat: add API key bearer token authentication
- ApiKeyVerifier(TokenVerifier) — validates Authorization: Bearer <key>
against UNRAID_MCP_API_KEY; guards against empty-key bypass
- _build_auth() replaces module-level _build_google_auth() call:
returns MultiAuth(server=google, verifiers=[api_key]) when both set,
GoogleProvider alone, ApiKeyVerifier alone, or None
- settings.py: add UNRAID_MCP_API_KEY + is_api_key_auth_configured()
+ api_key_auth_enabled in get_config_summary()
- run_server(): improved auth status logging for all three states
- tests/test_api_key_auth.py: 9 tests covering verifier + _build_auth
- .env.example: add UNRAID_MCP_API_KEY section
- docs/GOOGLE_OAUTH.md: add API Key section
- README.md / CLAUDE.md: rename section, document both auth methods
- Fix pre-existing: test_health.py patched cache_middleware/error_middleware
now match renamed _cache_middleware/_error_middleware in server.py
2026-03-16 11:11:38 -04:00
..
2026-03-16 02:29:57 -04:00
2026-03-16 02:29:57 -04:00
2026-03-16 10:54:43 -04:00
2026-03-16 11:11:38 -04:00
2026-03-16 10:01:12 -04:00
2026-03-16 02:29:57 -04:00
2026-03-16 11:11:38 -04:00
2026-03-14 04:07:51 -04:00
2026-03-16 11:11:38 -04:00
2026-03-16 02:29:57 -04:00
2026-03-16 10:51:14 -04:00
2026-03-16 10:51:14 -04:00
2026-03-14 03:55:57 -04:00
2026-03-16 11:11:38 -04:00
2026-03-16 02:29:57 -04:00
2026-03-15 23:25:39 -04:00
2026-03-16 11:11:38 -04:00
2026-03-16 10:01:12 -04:00
2026-03-16 02:29:57 -04:00
2026-03-16 02:58:54 -04:00
2026-03-16 02:58:54 -04:00
2026-03-16 02:58:54 -04:00
2026-03-16 02:29:57 -04:00
2026-03-16 02:29:57 -04:00
2026-03-16 11:11:38 -04:00
2026-03-16 02:29:57 -04:00
2026-03-16 02:58:54 -04:00
2026-03-15 21:43:18 -04:00
2026-03-16 02:29:57 -04:00
2026-02-19 02:23:04 -05:00
2026-03-13 10:55:54 -04:00
2026-03-16 02:29:57 -04:00
2026-03-16 02:29:57 -04:00