fastmcp 4.23.13 → 4.23.14

package/dist/FastMCP.cjs

@@ -11,7 +11,7 @@
 
 
 
-var _chunk4P2GDM7Wcjs = require('./chunk-4P2GDM7W.cjs');
+var _chunk7USB5QLHcjs = require('./chunk-7USB5QLH.cjs');
 
 
 
@@ -50,5 +50,5 @@ require('./chunk-6TDYSPLC.cjs');
 
 
 
-exports.AuthProvider = _chunkBV4PWTT6cjs.AuthProvider; exports.AzureProvider = _chunkBV4PWTT6cjs.AzureProvider; exports.DiscoveryDocumentCache = _chunk4P2GDM7Wcjs.DiscoveryDocumentCache; exports.FastMCP = _chunk4P2GDM7Wcjs.FastMCP; exports.FastMCPError = _chunk4P2GDM7Wcjs.FastMCPError; exports.FastMCPSession = _chunk4P2GDM7Wcjs.FastMCPSession; exports.GitHubProvider = _chunkBV4PWTT6cjs.GitHubProvider; exports.GoogleProvider = _chunkBV4PWTT6cjs.GoogleProvider; exports.MEDIA_FETCH_TIMEOUT_MS = _chunk4P2GDM7Wcjs.MEDIA_FETCH_TIMEOUT_MS; exports.OAuthProvider = _chunkBV4PWTT6cjs.OAuthProvider; exports.ServerState = _chunk4P2GDM7Wcjs.ServerState; exports.SessionError = _chunk4P2GDM7Wcjs.SessionError; exports.UnexpectedStateError = _chunk4P2GDM7Wcjs.UnexpectedStateError; exports.UserError = _chunk4P2GDM7Wcjs.UserError; exports.audioContent = _chunk4P2GDM7Wcjs.audioContent; exports.getAuthSession = _chunkBV4PWTT6cjs.getAuthSession; exports.imageContent = _chunk4P2GDM7Wcjs.imageContent; exports.jsonSchemaAdapter = _chunk4P2GDM7Wcjs.jsonSchemaAdapter; exports.requireAll = _chunkBV4PWTT6cjs.requireAll; exports.requireAny = _chunkBV4PWTT6cjs.requireAny; exports.requireAuth = _chunkBV4PWTT6cjs.requireAuth; exports.requireRole = _chunkBV4PWTT6cjs.requireRole; exports.requireScopes = _chunkBV4PWTT6cjs.requireScopes;
+exports.AuthProvider = _chunkBV4PWTT6cjs.AuthProvider; exports.AzureProvider = _chunkBV4PWTT6cjs.AzureProvider; exports.DiscoveryDocumentCache = _chunk7USB5QLHcjs.DiscoveryDocumentCache; exports.FastMCP = _chunk7USB5QLHcjs.FastMCP; exports.FastMCPError = _chunk7USB5QLHcjs.FastMCPError; exports.FastMCPSession = _chunk7USB5QLHcjs.FastMCPSession; exports.GitHubProvider = _chunkBV4PWTT6cjs.GitHubProvider; exports.GoogleProvider = _chunkBV4PWTT6cjs.GoogleProvider; exports.MEDIA_FETCH_TIMEOUT_MS = _chunk7USB5QLHcjs.MEDIA_FETCH_TIMEOUT_MS; exports.OAuthProvider = _chunkBV4PWTT6cjs.OAuthProvider; exports.ServerState = _chunk7USB5QLHcjs.ServerState; exports.SessionError = _chunk7USB5QLHcjs.SessionError; exports.UnexpectedStateError = _chunk7USB5QLHcjs.UnexpectedStateError; exports.UserError = _chunk7USB5QLHcjs.UserError; exports.audioContent = _chunk7USB5QLHcjs.audioContent; exports.getAuthSession = _chunkBV4PWTT6cjs.getAuthSession; exports.imageContent = _chunk7USB5QLHcjs.imageContent; exports.jsonSchemaAdapter = _chunk7USB5QLHcjs.jsonSchemaAdapter; exports.requireAll = _chunkBV4PWTT6cjs.requireAll; exports.requireAny = _chunkBV4PWTT6cjs.requireAny; exports.requireAuth = _chunkBV4PWTT6cjs.requireAuth; exports.requireRole = _chunkBV4PWTT6cjs.requireRole; exports.requireScopes = _chunkBV4PWTT6cjs.requireScopes;
 //# sourceMappingURL=FastMCP.cjs.map

package/dist/FastMCP.js

@@ -11,7 +11,7 @@ import {
   audioContent,
   imageContent,
   jsonSchemaAdapter
-} from "./chunk-ULNQF5KG.js";
+} from "./chunk-UUZLMH5M.js";
 import {
   AuthProvider,
   AzureProvider,

package/dist/{chunk-4P2GDM7W.cjs → chunk-7USB5QLH.cjs}

@@ -3314,12 +3314,11 @@ var FastMCP = class extends FastMCPEventEmitter {
    * Rejects a failed authentication result before it can become a session.
    *
    * Authentication is REQUIRED whenever an `authenticate` function is
-   * configured. mcp-proxy gates the HTTP Stream endpoint before `createServer`
-   * runs, but it does not gate the SSE endpoint it serves at `/sse` by default:
-   * `handleSSERequest` never receives `authenticate`. Throwing here is what
-   * stops `/sse` from handing out a session — with access to every tool, since
-   * `#createSession` skips `canAccess` filtering when `auth` is falsy — to a
-   * client that `/mcp` would have answered with a 401.
+   * configured. mcp-proxy answers a failed `authenticate` with a 401 before
+   * `createServer` runs: on the HTTP Stream endpoint, and since 6.8.0 on the
+   * SSE endpoint's `GET /sse` and every `POST /messages` too. This is the
+   * second gate, so a client that `/mcp` would answer with a 401 never gets a
+   * session, whichever endpoint it uses.
    *
    * The falsy test matches mcp-proxy's own check so that both endpoints agree
    * on what counts as a failed authentication. Returning a nullish value is the
@@ -3394,4 +3393,4 @@ var FastMCP = class extends FastMCPEventEmitter {
 
 
 exports.DiscoveryDocumentCache = DiscoveryDocumentCache; exports.jsonSchemaAdapter = jsonSchemaAdapter; exports.MEDIA_FETCH_TIMEOUT_MS = MEDIA_FETCH_TIMEOUT_MS; exports.imageContent = imageContent; exports.audioContent = audioContent; exports.FastMCPError = FastMCPError; exports.SessionError = SessionError; exports.UnexpectedStateError = UnexpectedStateError; exports.UserError = UserError; exports.ServerState = ServerState; exports.FastMCPSession = FastMCPSession; exports.FastMCP = FastMCP;
-//# sourceMappingURL=chunk-4P2GDM7W.cjs.map
+//# sourceMappingURL=chunk-7USB5QLH.cjs.map