@softeria/ms-365-mcp-server 0.159.0 → 0.159.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/dist/server.js +2 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -182,7 +182,7 @@ npx @softeria/ms-365-mcp-server \
|
|
|
182
182
|
--allowed-scopes 'User.Read Files.Read Notes.Read Tasks.Read Sites.Selected'
|
|
183
183
|
```
|
|
184
184
|
|
|
185
|
-
In HTTP mode, OAuth discovery advertises the effective filtered permissions so clients request the same consent surface. On-Behalf-Of mode (`--obo`) still advertises
|
|
185
|
+
In HTTP mode, OAuth discovery advertises the effective filtered permissions so clients request the same consent surface. On-Behalf-Of mode (`--obo`) still advertises `<clientId>/access_as_user` for protected-resource metadata and requests it on `/authorize`; `--allowed-scopes` does not override OBO, it only narrows the tool surface.
|
|
186
186
|
|
|
187
187
|
### Restricting user profile fields
|
|
188
188
|
|
package/dist/server.js
CHANGED
|
@@ -513,7 +513,8 @@ class MicrosoftGraphServer {
|
|
|
513
513
|
microsoftAuthUrl.searchParams.set("client_id", clientId);
|
|
514
514
|
const explicitAllowedScopes = parseAllowedScopes(this.options.allowedScopes);
|
|
515
515
|
const clientScope = microsoftAuthUrl.searchParams.get("scope");
|
|
516
|
-
const
|
|
516
|
+
const clientScopes = (clientScope ?? "").split(/\s+/).filter(Boolean);
|
|
517
|
+
const baseScopes = this.options.obo ? clientScopes.some((scope) => scope.endsWith("/access_as_user")) ? clientScopes : [`${clientId}/access_as_user`, ...clientScopes] : explicitAllowedScopes !== void 0 ? resolveAuthScopes(this.options) : clientScope ? clientScopes : buildScopesFromEndpoints(
|
|
517
518
|
this.options.orgMode,
|
|
518
519
|
this.options.enabledTools,
|
|
519
520
|
this.options.readOnly
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@softeria/ms-365-mcp-server",
|
|
3
3
|
"mcpName": "io.github.Softeria/ms-365-mcp-server",
|
|
4
|
-
"version": "0.159.
|
|
4
|
+
"version": "0.159.1",
|
|
5
5
|
"description": " A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API",
|
|
6
6
|
"type": "module",
|
|
7
7
|
"main": "dist/index.js",
|