mcp-proxy-adapter 6.2.34__py3-none-any.whl → 6.2.35__py3-none-any.whl

mcp_proxy_adapter/api/middleware/user_info_middleware.py

@@ -57,6 +57,9 @@ class UserInfoMiddleware(BaseHTTPMiddleware):
                 auth_config = security_config.get("auth", {})
                 permissions_config = security_config.get("permissions", {})
 
+                # Check if permissions are enabled
+                permissions_enabled = permissions_config.get("enabled", False)
+                
                 # Create AuthConfig for mcp_security_framework
                 mcp_auth_config = AuthConfig(
                     enabled=True,
@@ -64,27 +67,43 @@ class UserInfoMiddleware(BaseHTTPMiddleware):
                     api_keys=auth_config.get("api_keys", {})
                 )
 
-                # Create PermissionConfig for mcp_security_framework
-                mcp_permission_config = PermissionConfig(
-                    roles_file=permissions_config.get("roles_file"),
-                    default_role=permissions_config.get("default_role", "guest"),
-                    admin_role=permissions_config.get("admin_role", "admin"),
-                    role_hierarchy=permissions_config.get("role_hierarchy", {}),
-                    permission_cache_enabled=permissions_config.get(
-                        "permission_cache_enabled", True
-                    ),
-                    permission_cache_ttl=permissions_config.get(
-                        "permission_cache_ttl", 300
-                    ),
-                    wildcard_permissions=permissions_config.get(
-                        "wildcard_permissions", False
-                    ),
-                    strict_mode=permissions_config.get("strict_mode", True),
-                    roles=permissions_config.get("roles", {})
-                )
-
-                # Initialize PermissionManager first
-                self.permission_manager = PermissionManager(mcp_permission_config)
+                # Initialize PermissionManager only if permissions are enabled
+                if permissions_enabled:
+                    # Create PermissionConfig for mcp_security_framework
+                    mcp_permission_config = PermissionConfig(
+                        roles_file=permissions_config.get("roles_file"),
+                        default_role=permissions_config.get("default_role", "guest"),
+                        admin_role=permissions_config.get("admin_role", "admin"),
+                        role_hierarchy=permissions_config.get("role_hierarchy", {}),
+                        permission_cache_enabled=permissions_config.get(
+                            "permission_cache_enabled", True
+                        ),
+                        permission_cache_ttl=permissions_config.get(
+                            "permission_cache_ttl", 300
+                        ),
+                        wildcard_permissions=permissions_config.get(
+                            "wildcard_permissions", False
+                        ),
+                        strict_mode=permissions_config.get("strict_mode", True),
+                        roles=permissions_config.get("roles", {})
+                    )
+
+                    # Initialize PermissionManager first
+                    self.permission_manager = PermissionManager(mcp_permission_config)
+                else:
+                    # Create a minimal PermissionManager when permissions are disabled
+                    mcp_permission_config = PermissionConfig(
+                        roles_file=None,
+                        default_role="guest",
+                        admin_role="admin",
+                        role_hierarchy={},
+                        permission_cache_enabled=False,
+                        permission_cache_ttl=300,
+                        wildcard_permissions=False,
+                        strict_mode=False,
+                        roles={}
+                    )
+                    self.permission_manager = PermissionManager(mcp_permission_config)
 
                 # Initialize AuthManager with permission_manager
                 self.auth_manager = AuthManager(

mcp_proxy_adapter/core/config_validator.py

@@ -108,6 +108,23 @@ class ConfigValidator:
         security_enabled = security_config.get("enabled", True)
         auth_enabled = self.config.get("auth_enabled", False)
         
+        # Validate permissions configuration
+        permissions_config = security_config.get("permissions", {})
+        permissions_enabled = permissions_config.get("enabled", False)
+        
+        if permissions_enabled:
+            # Permissions require authentication to identify users
+            auth_config = security_config.get("auth", {})
+            if not auth_config.get("enabled", False):
+                self.errors.append("Permissions are enabled but authentication is disabled. Permissions require authentication to identify users.")
+                return False
+            
+            # Check if there are any authentication methods available
+            auth_methods = auth_config.get("methods", [])
+            if not auth_methods:
+                self.errors.append("Permissions are enabled but no authentication methods are configured. At least one authentication method is required.")
+                return False
+        
         if security_enabled and auth_enabled:
             # Validate auth configuration
             auth_config = security_config.get("auth", {})

mcp_proxy_adapter/core/security_integration.py

@@ -105,25 +105,42 @@ class SecurityIntegration:
         
         # Create permission config - handle null values properly
         permissions_section = security_section.get("permissions", {})
-        roles_file = permissions_section.get("roles_file")
-
-        # If roles_file is None or empty string, don't pass it to avoid framework errors
-        if roles_file is None or roles_file == "":
-            logger.warning("roles_file is None or empty, permissions will use default configuration")
-            roles_file = None
+        permissions_enabled = permissions_section.get("enabled", True)
         
-        permission_config = PermissionConfig(
-            enabled=permissions_section.get("enabled", True),
-            roles_file=roles_file,
-            default_role=permissions_section.get("default_role", "guest"),
-            admin_role=permissions_section.get("admin_role", "admin"),
-            role_hierarchy=permissions_section.get("role_hierarchy", {}),
-            permission_cache_enabled=permissions_section.get("permission_cache_enabled", True),
-            permission_cache_ttl=permissions_section.get("permission_cache_ttl", 300),
-            wildcard_permissions=permissions_section.get("wildcard_permissions", False),
-            strict_mode=permissions_section.get("strict_mode", True),
-            roles=permissions_section.get("roles")
-        )
+        if permissions_enabled:
+            roles_file = permissions_section.get("roles_file")
+
+            # If roles_file is None or empty string, don't pass it to avoid framework errors
+            if roles_file is None or roles_file == "":
+                logger.warning("roles_file is None or empty, permissions will use default configuration")
+                roles_file = None
+            
+            permission_config = PermissionConfig(
+                enabled=True,
+                roles_file=roles_file,
+                default_role=permissions_section.get("default_role", "guest"),
+                admin_role=permissions_section.get("admin_role", "admin"),
+                role_hierarchy=permissions_section.get("role_hierarchy", {}),
+                permission_cache_enabled=permissions_section.get("permission_cache_enabled", True),
+                permission_cache_ttl=permissions_section.get("permission_cache_ttl", 300),
+                wildcard_permissions=permissions_section.get("wildcard_permissions", False),
+                strict_mode=permissions_section.get("strict_mode", True),
+                roles=permissions_section.get("roles")
+            )
+        else:
+            # Create minimal permission config when permissions are disabled
+            permission_config = PermissionConfig(
+                enabled=False,
+                roles_file=None,
+                default_role="guest",
+                admin_role="admin",
+                role_hierarchy={},
+                permission_cache_enabled=False,
+                permission_cache_ttl=300,
+                wildcard_permissions=False,
+                strict_mode=False,
+                roles={}
+            )
         
         # Create rate limit config
         rate_limit_config = RateLimitConfig(

mcp_proxy_adapter/version.py

@@ -2,5 +2,5 @@
 Version information for MCP Proxy Adapter.
 """
 
-__version__ = "6.2.34"
+__version__ = "6.2.35"
 

{mcp_proxy_adapter-6.2.34.dist-info → mcp_proxy_adapter-6.2.35.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mcp-proxy-adapter
-Version: 6.2.34
+Version: 6.2.35
 Summary: Powerful JSON-RPC microservices framework with built-in security, authentication, and proxy registration
 Home-page: https://github.com/maverikod/mcp-proxy-adapter
 Author: Vasiliy Zdanovskiy

{mcp_proxy_adapter-6.2.34.dist-info → mcp_proxy_adapter-6.2.35.dist-info}/RECORD

@@ -4,7 +4,7 @@ mcp_proxy_adapter/config.py,sha256=QIOV57A_hwDH2z_BVEBJKDsPpa3IUKlqhRAij4bpQik,2
 mcp_proxy_adapter/custom_openapi.py,sha256=jYUrCy8C1mShh3sjKj-JkzSMLAvxDLTvtzSJFj5HUNg,15023
 mcp_proxy_adapter/main.py,sha256=9qt_pEQdq8roUc73CumfDn6jDWP_NyfdE1lCGEynv5I,2841
 mcp_proxy_adapter/openapi.py,sha256=36vOEbJjGnVZR6hUhl6mHCD29HYOEFKo2bL0JdGSm-4,13952
-mcp_proxy_adapter/version.py,sha256=8Rv-tnRMFu7W1xVGrsKl9PqMpFzjts8hLs89BkGcJHw,76
+mcp_proxy_adapter/version.py,sha256=Ejo8js-6RkuGhTLDydUfW-ZiZvYdAHVlTD1lhcEpGmE,76
 mcp_proxy_adapter/api/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 mcp_proxy_adapter/api/app.py,sha256=khl4kaI4mJ6dNbfAK7hR97Ek-eWC9NBeuXHr6GVbLoU,28911
 mcp_proxy_adapter/api/handlers.py,sha256=DcZT7MVBV33q-0EJ0iFqxE0VgBkFt6d_SqoRkntwyvc,8477
@@ -21,7 +21,7 @@ mcp_proxy_adapter/api/middleware/performance.py,sha256=dHBxTF43LEGXMKHMH3A8ybKmw
 mcp_proxy_adapter/api/middleware/protocol_middleware.py,sha256=iVjJrTEfKy15ZchQUo-Mu0hBg9kEP6vgzee_3PtWd6M,8115
 mcp_proxy_adapter/api/middleware/transport_middleware.py,sha256=Esy2gGKpEV5RoUTilr1YKKTDc5jh5RxsomD0VXyR2pE,4396
 mcp_proxy_adapter/api/middleware/unified_security.py,sha256=fDWUeIuHjYUngVnB8gVR9ES3IQSaY9VP2YPZGXATJlU,7617
-mcp_proxy_adapter/api/middleware/user_info_middleware.py,sha256=gJX5WUMa-ByWpbvbFUftymH3BuQNaj1h1lGDqq9VU6g,8134
+mcp_proxy_adapter/api/middleware/user_info_middleware.py,sha256=YGtt_1Q4GkvdFopMC2wTfC3OZZXDiOU4v5BxlD1Ge9w,9168
 mcp_proxy_adapter/commands/__init__.py,sha256=r791wg4FKhWSi5rqA3vekDcGf5kr18pwF1woX-dnZKo,1525
 mcp_proxy_adapter/commands/auth_validation_command.py,sha256=z612WJDVgZwaCrxdQhATwRc5i3qxH37MPuIV6SuZPn8,15083
 mcp_proxy_adapter/commands/base.py,sha256=tunyrmt-LYJMQZslAZQor3KZvOrn1IYNpL5uOAnSdxc,15791
@@ -61,7 +61,7 @@ mcp_proxy_adapter/core/client.py,sha256=AeNjMyaTnnR0g6Sw_c28X_le8o5SbEi-_PaRtVtt
 mcp_proxy_adapter/core/client_manager.py,sha256=sKEhapMpogqb54WIWEpz2bMjrX3wvYooX-a844IfCTU,9164
 mcp_proxy_adapter/core/client_security.py,sha256=8isHpvv-7H85QzI8K3Pfyr_KdvpE2xYyIT4wqWrttNU,13575
 mcp_proxy_adapter/core/config_converter.py,sha256=FAA2zx-yRgqMgzg73o9Aq5CEEfodNCeaA8Yluto4wAs,16985
-mcp_proxy_adapter/core/config_validator.py,sha256=qDVmkRatuDeWylIPLjMq02Vpzff6DDTE_CstpzqGi7o,7773
+mcp_proxy_adapter/core/config_validator.py,sha256=fRN0D727FYlka-Yn0x3-tABJFrXjXorWR1fAD97e02c,8722
 mcp_proxy_adapter/core/errors.py,sha256=s34OxiIR4NCJu_pYSigKXqrIvRjUUK2OWw0X4dpDjIA,5151
 mcp_proxy_adapter/core/logging.py,sha256=jQlFz52Xwapef6UD4p0acmaGFumD9XuexwW4frDN_ZM,9626
 mcp_proxy_adapter/core/mtls_asgi.py,sha256=X2lAj3wk3L85amRCp_-10sqvZa5wJf_diXhwrrQReSo,5311
@@ -72,7 +72,7 @@ mcp_proxy_adapter/core/proxy_registration.py,sha256=Mmh-hWVJKkADLP8361Nx_SGFp9JR
 mcp_proxy_adapter/core/role_utils.py,sha256=wMoTVz3gF5fM7jozNMwsEwPkp1tui26M-t_KH1Oz8gs,12880
 mcp_proxy_adapter/core/security_adapter.py,sha256=wZ3OH1WzhUdpN8N8CrGJSFFVNi474DqdazIqQ1T8PN4,13343
 mcp_proxy_adapter/core/security_factory.py,sha256=4r7qvBq30XfosGD_b1ZHyNVLN8rOQ3NAKuaCOCEK8jA,8262
-mcp_proxy_adapter/core/security_integration.py,sha256=6oJKVCL1CRnk3sTWX-PBzDjv737oe4QL-9r3l89kRkc,13715
+mcp_proxy_adapter/core/security_integration.py,sha256=axeNotm4DZBZhbVXIfHHV0TsX4KVhvf1shbIAHEEkZI,14385
 mcp_proxy_adapter/core/server_adapter.py,sha256=8dhUlLxuYjaoNgMHieFCFgDRjxskP--Y5uoAhbN6RLw,9823
 mcp_proxy_adapter/core/server_engine.py,sha256=SFENSDrVMlBD--HgKSRVklhrtLKSRSZhs_3UHxFCGbg,9540
 mcp_proxy_adapter/core/settings.py,sha256=ZfUnmqD1tjAuaQo2VAF8evC1oHUit7gTu4WkTF0IMYI,10628
@@ -134,9 +134,9 @@ mcp_proxy_adapter/examples/scripts/generate_certificates_and_tokens.py,sha256=J0
 mcp_proxy_adapter/schemas/base_schema.json,sha256=v9G9cGMd4dRhCZsOQ_FMqOi5VFyVbI6Cf3fyIvOT9dc,2881
 mcp_proxy_adapter/schemas/openapi_schema.json,sha256=C3yLkwmDsvnLW9B5gnKKdBGl4zxkeU-rEmjTrNVsQU0,8405
 mcp_proxy_adapter/utils/config_generator.py,sha256=2dxwBh9k_nUw9kgytZso5TNOQpBqd3c-RpKSTLoHlLE,46465
-mcp_proxy_adapter-6.2.34.dist-info/licenses/LICENSE,sha256=6KdtUcTwmTRbJrAmYjVn7e6S-V42ubeDJ-AiVEzZ510,1075
-mcp_proxy_adapter-6.2.34.dist-info/METADATA,sha256=l0uENuXxZKqEOdMXaaMBnEWWegRTQDO9CJYiNGWGIhA,22348
-mcp_proxy_adapter-6.2.34.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-mcp_proxy_adapter-6.2.34.dist-info/entry_points.txt,sha256=J3eV6ID0lt_VSp4lIdIgBFTqLCThgObNNxRCbyfiMHw,70
-mcp_proxy_adapter-6.2.34.dist-info/top_level.txt,sha256=JZT7vPLBYrtroX-ij68JBhJYbjDdghcV-DFySRy-Nnw,18
-mcp_proxy_adapter-6.2.34.dist-info/RECORD,,
+mcp_proxy_adapter-6.2.35.dist-info/licenses/LICENSE,sha256=6KdtUcTwmTRbJrAmYjVn7e6S-V42ubeDJ-AiVEzZ510,1075
+mcp_proxy_adapter-6.2.35.dist-info/METADATA,sha256=Zb9ZBBx8q337nWqYhTiRrgjAvTxpKVWdpY5ozjwtI5o,22348
+mcp_proxy_adapter-6.2.35.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+mcp_proxy_adapter-6.2.35.dist-info/entry_points.txt,sha256=J3eV6ID0lt_VSp4lIdIgBFTqLCThgObNNxRCbyfiMHw,70
+mcp_proxy_adapter-6.2.35.dist-info/top_level.txt,sha256=JZT7vPLBYrtroX-ij68JBhJYbjDdghcV-DFySRy-Nnw,18
+mcp_proxy_adapter-6.2.35.dist-info/RECORD,,