From 58c47dc95cfaac775526143a4daafcfaadd02256 Mon Sep 17 00:00:00 2001 From: Marc Nuri Date: Fri, 8 Aug 2025 12:46:45 +0300 Subject: [PATCH] refactor(auth): temporarily disable scope authorization (#254) It's unclear how the scopes are going to be populated in the JWT. Disable scope authorization for the time being. Signed-off-by: Marc Nuri --- pkg/mcp/mcp.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/mcp/mcp.go b/pkg/mcp/mcp.go index 729cab2..54a9da8 100644 --- a/pkg/mcp/mcp.go +++ b/pkg/mcp/mcp.go @@ -62,7 +62,7 @@ func NewServer(configuration Configuration) (*Server, error) { server.WithLogging(), server.WithToolHandlerMiddleware(toolCallLoggingMiddleware), ) - if configuration.StaticConfig.RequireOAuth { + if configuration.StaticConfig.RequireOAuth && false { // TODO: Disabled scope auth validation for now serverOptions = append(serverOptions, server.WithToolHandlerMiddleware(toolScopedAuthorizationMiddleware)) }