mcp-proxy-adapter 6.9.8__tar.gz → 6.9.11__tar.gz

{mcp_proxy_adapter-6.9.8 → mcp_proxy_adapter-6.9.11}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mcp-proxy-adapter
-Version: 6.9.8
+Version: 6.9.11
 Summary: Powerful JSON-RPC microservices framework with built-in security, authentication, and proxy registration
 Home-page: https://github.com/maverikod/mcp-proxy-adapter
 Author: Vasiliy Zdanovskiy

{mcp_proxy_adapter-6.9.8 → mcp_proxy_adapter-6.9.11}/mcp_proxy_adapter/api/app.py

@@ -388,18 +388,19 @@ def create_app(
     try:
         from mcp_proxy_adapter.core.config_validator import ConfigValidator
 
-        try:
-            _validator = ConfigValidator()
-        except TypeError:
-            _validator = ConfigValidator(current_config)
-        _validation = _validator.validate(current_config)
-        if not _validation.is_valid:
+        _validator = ConfigValidator()
+        _validator.config_data = current_config
+        _validation_results = _validator.validate_config()
+        errors = [r for r in _validation_results if r.level == "error"]
+        warnings = [r for r in _validation_results if r.level == "warning"]
+        
+        if errors:
             logger.critical("CRITICAL CONFIG ERROR: Invalid configuration at startup:")
-            for _e in _validation.errors:
-                logger.critical(f"  - {_e}")
+            for _e in errors:
+                logger.critical(f"  - {_e.message}")
             raise SystemExit(1)
-        for _w in _validation.warnings:
-            logger.warning(f"Config warning: {_w}")
+        for _w in warnings:
+            logger.warning(f"Config warning: {_w.message}")
     except Exception as _ex:
         logger.error(f"Failed to run startup configuration validation: {_ex}")
 

{mcp_proxy_adapter-6.9.8 → mcp_proxy_adapter-6.9.11}/mcp_proxy_adapter/core/config_validator.py

@@ -312,9 +312,15 @@ class ConfigValidator:
                             ))
         
         # Check conditional sections based on feature flags
+        protocol = self._get_nested_value_safe("server.protocol", "http")
+        
         for feature_name, feature_config in self.feature_flags.items():
             enabled_key = feature_config["enabled_key"]
             
+            # Skip SSL validation for HTTP protocol
+            if feature_name in ["ssl", "transport_ssl"] and protocol not in ["https", "mtls"]:
+                continue
+            
             # Only check if the enabled key exists in the configuration
             if not self._has_nested_key(enabled_key):
                 continue
@@ -365,9 +371,15 @@ class ConfigValidator:
     
     def _validate_feature_flags(self) -> None:
         """Validate feature flags and their dependencies."""
+        protocol = self._get_nested_value_safe("server.protocol", "http")
+        
         for feature_name, feature_config in self.feature_flags.items():
             enabled_key = feature_config["enabled_key"]
             
+            # Skip SSL validation for HTTP protocol
+            if feature_name in ["ssl", "transport_ssl"] and protocol not in ["https", "mtls"]:
+                continue
+            
             # Check if the enabled key exists in the configuration
             if not self._has_nested_key(enabled_key):
                 # Skip validation if the feature flag key doesn't exist
@@ -415,6 +427,26 @@ class ConfigValidator:
         """Validate protocol-specific requirements."""
         protocol = self._get_nested_value_safe("server.protocol", "http")
         
+        # Check mTLS protocol requirements
+        if protocol == "mtls":
+            # mTLS requires HTTPS protocol
+            if not self._has_nested_key("ssl.enabled"):
+                self.validation_results.append(ValidationResult(
+                    level="error",
+                    message="mTLS protocol requires SSL configuration",
+                    section="ssl",
+                    key="enabled"
+                ))
+            else:
+                ssl_enabled = self._get_nested_value_safe("ssl.enabled", False)
+                if not ssl_enabled:
+                    self.validation_results.append(ValidationResult(
+                        level="error",
+                        message="mTLS protocol requires SSL to be enabled",
+                        section="ssl",
+                        key="enabled"
+                    ))
+        
         if protocol not in self.protocol_requirements:
             self.validation_results.append(ValidationResult(
                 level="error",
@@ -471,23 +503,37 @@ class ConfigValidator:
     
     def _validate_file_existence(self) -> None:
         """Validate that all referenced files exist."""
+        protocol = self._get_nested_value_safe("server.protocol", "http")
+        
         file_keys = [
             "logging.log_dir",
             "commands.commands_directory",
             "commands.catalog_directory",
             "commands.custom_commands_path",
             "security.roles_file",
-            "roles.config_file",
-            "ssl.cert_file",
-            "ssl.key_file",
-            "ssl.ca_cert",
-            "transport.ssl.cert_file",
-            "transport.ssl.key_file",
-            "transport.ssl.ca_cert",
-            "proxy_registration.certificate.cert_file",
-            "proxy_registration.certificate.key_file"
+            "roles.config_file"
         ]
         
+        # Only add SSL-related files if protocol requires SSL
+        if protocol in ["https", "mtls"]:
+            file_keys.extend([
+                "ssl.cert_file",
+                "ssl.key_file",
+                "ssl.ca_cert",
+                "transport.ssl.cert_file",
+                "transport.ssl.key_file",
+                "transport.ssl.ca_cert"
+            ])
+        
+        # Only add proxy registration files if proxy registration is enabled
+        if self._has_nested_key("proxy_registration.enabled"):
+            proxy_enabled = self._get_nested_value_safe("proxy_registration.enabled", False)
+            if proxy_enabled:
+                file_keys.extend([
+                    "proxy_registration.certificate.cert_file",
+                    "proxy_registration.certificate.key_file"
+                ])
+        
         for file_key in file_keys:
             file_path = self._get_nested_value(file_key)
             if file_path and not os.path.exists(file_path):
@@ -607,6 +653,11 @@ class ConfigValidator:
     
     def _validate_ssl_configuration(self) -> None:
         """Validate SSL configuration with detailed certificate validation."""
+        # Only validate SSL if the protocol requires it
+        protocol = self._get_nested_value_safe("server.protocol", "http")
+        if protocol not in ["https", "mtls"]:
+            return
+
         # Only validate SSL if the ssl section exists
         if not self._has_nested_key("ssl.enabled"):
             return
@@ -800,7 +851,7 @@ class ConfigValidator:
             
             # Check certificate expiration
             now = datetime.now(timezone.utc)
-            not_after = cert.not_valid_after.replace(tzinfo=timezone.utc)
+            not_after = cert.not_valid_after_utc
             
             if now > not_after:
                 self.validation_results.append(ValidationResult(
@@ -1062,7 +1113,7 @@ class ConfigValidator:
                 level="error",
                 message=f"Error validating certificate-key pair: {e}",
                 section=section,
-                key=key
+                key="cert_file"
             ))
     
     def _validate_certificate_chain(self, cert_file: str, ca_cert_file: str, section: str) -> None:

{mcp_proxy_adapter-6.9.8 → mcp_proxy_adapter-6.9.11}/mcp_proxy_adapter/examples/config_builder.py

@@ -82,6 +82,12 @@ def generate_complete_config(host: str = "0.0.0.0", port: int = 8000) -> Dict[st
             "enabled": False,
             "level": "WARNING"
         },
+        "ssl": {
+            "enabled": False,
+            "cert_file": None,
+            "key_file": None,
+            "ca_cert": None
+        },
         "security": {
             "enabled": False,
             "tokens": {},

{mcp_proxy_adapter-6.9.8 → mcp_proxy_adapter-6.9.11}/mcp_proxy_adapter/version.py

@@ -2,4 +2,4 @@
 Version information for MCP Proxy Adapter.
 """
 
-__version__ = "6.9.8"
+__version__ = "6.9.11"

{mcp_proxy_adapter-6.9.8 → mcp_proxy_adapter-6.9.11}/mcp_proxy_adapter.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mcp-proxy-adapter
-Version: 6.9.8
+Version: 6.9.11
 Summary: Powerful JSON-RPC microservices framework with built-in security, authentication, and proxy registration
 Home-page: https://github.com/maverikod/mcp-proxy-adapter
 Author: Vasiliy Zdanovskiy

{mcp_proxy_adapter-6.9.8 → mcp_proxy_adapter-6.9.11}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "mcp-proxy-adapter"
-version = "6.9.8"
+version = "6.9.11"
 description = "Powerful JSON-RPC microservices framework with built-in security, authentication, and proxy registration"
 readme = "README.md"
 license = {text = "MIT"}