actionmcp 0.104.0 → 0.104.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3f008e25bbf68f4c85a29052acb37e59324d302fe5b53c209f7370e80c62e21e
-  data.tar.gz: 8d436c6029b33e6e46b43689ea9ab063b7e8474146263d72bbbfc888fffb4b56
+  metadata.gz: 6cfb5ce2385d840e5a70a47707ff2a684b2b1129ab19e55869832cff57286619
+  data.tar.gz: aedeccd60db4263d29eee4da2d051d5910978c50951765dc7ec6b83cb1c2c6c9
 SHA512:
-  metadata.gz: 2f3bf909be5df38c2ca0377ac0773d6b61bfd776f25b2148aae0d218241ee80879ab43fd49dbc6b206985cf9e96a6ffe421ff0158dec48f9d9368690342b6419
-  data.tar.gz: 75ad95eb4c7bd7b309e2db5ae7f47722c620e1d585aed0c30f186eaec55bfa4637b99865fe7613e01b7eb217e7e6d28555b8b8ef4695c14c21a97fbbd8e94c52
+  metadata.gz: c6fe8f1b667633f25e566df67f6c8da36d652ef993eb568b8c73b23fd46bb85c3c096560b91c62056bc00325fd1daa23aba789d960697007b5d28881ce02d292
+  data.tar.gz: dc9a41f5f340b09e11c551d64857239501341602731136686f508e3f8fa22558e9f10392941887c20f2ae6cbd7f1174d87fa4b371142e90bcbd3e0bfe8b90353

data/lib/action_mcp/configuration.rb

@@ -44,12 +44,14 @@ module ActionMCP
                   :max_queue,
                   :polling_interval,
                   :connects_to,
-                   # --- Tasks Options (MCP 2025-11-25) ---
-                   :tasks_enabled,
-                   :tasks_list_enabled,
-                   :tasks_cancel_enabled,
-                   # --- Schema Validation Options ---
-                   :validate_structured_content
+                  # --- Tasks Options (MCP 2025-11-25) ---
+                  :tasks_enabled,
+                  :tasks_list_enabled,
+                  :tasks_cancel_enabled,
+                  # --- Schema Validation Options ---
+                  :validate_structured_content,
+                  # --- Allowed identity keys for gateway ---
+                  :allowed_identity_keys
 
     def initialize
       @logging_enabled = false
@@ -84,6 +86,11 @@ module ActionMCP
       @session_store_type = Rails.env.production? ? :active_record : :volatile
       @client_session_store_type = nil # defaults to session_store_type
       @server_session_store_type = nil # defaults to session_store_type
+
+      # Whitelist of allowed identity attribute names to prevent method shadowing
+      # and unauthorized attribute assignment. Extend this list if you use custom
+      # identifier names in your GatewayIdentifier implementations.
+      @allowed_identity_keys = %w[user api_key jwt bearer token account session].freeze
     end
 
     def name
@@ -118,6 +125,10 @@ module ActionMCP
       @server_instructions = parse_instructions(value)
     end
 
+    def allowed_identity_keys=(value)
+      @allowed_identity_keys = Array(value).map(&:to_s).freeze
+    end
+
     def gateway_class
       # Resolve gateway class lazily to account for Zeitwerk autoloading
       # This allows ApplicationGateway to be loaded from app/mcp even if the

data/lib/action_mcp/gateway.rb

@@ -4,11 +4,6 @@ module ActionMCP
   class UnauthorizedError < StandardError; end
 
   class Gateway
-    # Whitelist of allowed identity attribute names to prevent method shadowing
-    # and unauthorized attribute assignment. Extend this list if you use custom
-    # identifier names in your GatewayIdentifier implementations.
-    ALLOWED_IDENTITY_KEYS = %w[user api_key jwt bearer token account session].freeze
-
     class << self
       # pluck in one or many GatewayIdentifier classes
       def identified_by(*klasses)
@@ -78,9 +73,9 @@ module ActionMCP
         name_str = name.to_s
 
         # Validate identity key against whitelist to prevent method shadowing
-        unless ALLOWED_IDENTITY_KEYS.include?(name_str)
+        unless allowed_identity_keys.include?(name_str)
           raise ArgumentError, "Invalid identity key: '#{name_str}'. " \
-                               "Allowed keys: #{ALLOWED_IDENTITY_KEYS.join(', ')}"
+                               "Allowed keys: #{allowed_identity_keys.join(', ')}"
         end
 
         # define accessor on the fly
@@ -114,5 +109,9 @@ module ActionMCP
     def apply_profile_from_authentication(identities)
       # Default: do nothing. Override in subclass if you want profile switching.
     end
+
+    def allowed_identity_keys
+      ActionMCP.configuration.allowed_identity_keys
+    end
   end
 end

data/lib/action_mcp/version.rb

@@ -2,7 +2,7 @@
 
 require_relative "gem_version"
 module ActionMCP
-  VERSION = "0.104.0"
+  VERSION = "0.104.1"
 
   class << self
     alias version gem_version

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: actionmcp
 version: !ruby/object:Gem::Version
-  version: 0.104.0
+  version: 0.104.1
 platform: ruby
 authors:
 - Abdelkader Boudih
@@ -302,7 +302,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.1
+rubygems_version: 4.0.3
 specification_version: 4
 summary: Lightweight Model Context Protocol (MCP) server toolkit for Ruby/Rails
 test_files: []