mcp-sharepoint-us 2.0.5__py3-none-any.whl → 2.0.7__py3-none-any.whl

mcp_sharepoint/auth.py

@@ -7,6 +7,7 @@ import logging
 import time
 import random
 from typing import Optional
+from urllib.parse import urlparse
 from office365.sharepoint.client_context import ClientContext
 from office365.runtime.auth.client_credential import ClientCredential
 import msal
@@ -69,12 +70,22 @@ class SharePointAuthenticator:
             # Optional: enable MSAL token cache (in-memory). Helps reduce calls.
             self._token_cache = getattr(self, "_token_cache", msal.SerializableTokenCache())
 
-            self._msal_app = msal.ConfidentialClientApplication(
-                authority=authority_url,
-                client_id=self.client_id,
-                client_credential=self.client_secret,
-                token_cache=self._token_cache,
-            )
+            # For government cloud, disable instance discovery to prevent
+            # MSAL from trying to connect to commercial cloud endpoints
+            msal_params = {
+                "authority": authority_url,
+                "client_id": self.client_id,
+                "client_credential": self.client_secret,
+                "token_cache": self._token_cache,
+            }
+
+            # Disable instance discovery for sovereign clouds to avoid
+            # hitting login.microsoftonline.com endpoints
+            if self.cloud in ("government", "us"):
+                msal_params["validate_authority"] = False
+                logger.info("Disabled authority validation for government cloud")
+
+            self._msal_app = msal.ConfidentialClientApplication(**msal_params)
             self._authority_url = authority_url
 
         # Small in-memory access-token cache (avoid repeated acquire calls)
@@ -83,7 +94,13 @@ class SharePointAuthenticator:
             self._access_token = None
             self._access_token_exp = 0
 
-        scopes = [f"{self.site_url}/.default"]
+        # Extract root SharePoint URL for scope
+        # For https://tenant.sharepoint.us/sites/SiteName -> https://tenant.sharepoint.us
+        parsed = urlparse(self.site_url)
+        sharepoint_root = f"{parsed.scheme}://{parsed.netloc}"
+        scopes = [f"{sharepoint_root}/.default"]
+
+        logger.info(f"Using SharePoint root scope: {sharepoint_root}/.default")
 
         def acquire_token() -> str:
             """

{mcp_sharepoint_us-2.0.5.dist-info → mcp_sharepoint_us-2.0.7.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mcp-sharepoint-us
-Version: 2.0.5
+Version: 2.0.7
 Summary: SharePoint MCP Server with Modern Azure AD Authentication
 License: MIT
 Project-URL: Homepage, https://github.com/mdev26/mcp-sharepoint-us

mcp_sharepoint_us-2.0.7.dist-info/RECORD

@@ -0,0 +1,9 @@
+mcp_sharepoint/__init__.py,sha256=vnnELXIj7FdcW8KIYoeXlwq4FblG63RTrXGGSO8KdSU,19412
+mcp_sharepoint/__main__.py,sha256=4iVDdDZx4rQ4Zo-x0RaCrT-NKeGObIz_ks3YF8di2nA,132
+mcp_sharepoint/auth.py,sha256=Fnc0VhGCFWsiLNHzrH2DB1w2Tnz8U2gvSLOVO1tgE6E,12865
+mcp_sharepoint_us-2.0.7.dist-info/licenses/LICENSE,sha256=SRM8juGH4GjIqnl5rrp-P-S5mW5h2mINOPx5-wOZG6s,1112
+mcp_sharepoint_us-2.0.7.dist-info/METADATA,sha256=bQPSFe9whxi949ewDd3j_9w69_rz7c5Cg8M87YOz8hc,11379
+mcp_sharepoint_us-2.0.7.dist-info/WHEEL,sha256=wUyA8OaulRlbfwMtmQsvNngGrxQHAvkKcvRmdizlJi0,92
+mcp_sharepoint_us-2.0.7.dist-info/entry_points.txt,sha256=UZOa_7OLI41rmsErbvnSz9RahPMGQVcqZUFMphOcjbY,57
+mcp_sharepoint_us-2.0.7.dist-info/top_level.txt,sha256=R6mRoWe61lz4kUSKGV6S2XVbE7825xfC_J-ouZIYpuo,15
+mcp_sharepoint_us-2.0.7.dist-info/RECORD,,

mcp_sharepoint_us-2.0.5.dist-info/RECORD

@@ -1,9 +0,0 @@
-mcp_sharepoint/__init__.py,sha256=vnnELXIj7FdcW8KIYoeXlwq4FblG63RTrXGGSO8KdSU,19412
-mcp_sharepoint/__main__.py,sha256=4iVDdDZx4rQ4Zo-x0RaCrT-NKeGObIz_ks3YF8di2nA,132
-mcp_sharepoint/auth.py,sha256=J_NV2XN-4qv8d-i-P6_btYDdExEWi4BSw0jO-2kCqlk,11984
-mcp_sharepoint_us-2.0.5.dist-info/licenses/LICENSE,sha256=SRM8juGH4GjIqnl5rrp-P-S5mW5h2mINOPx5-wOZG6s,1112
-mcp_sharepoint_us-2.0.5.dist-info/METADATA,sha256=-XkuUvhJAC2npnvlrv1PJzV9SOmlPPDiDTwNE6QB1qA,11379
-mcp_sharepoint_us-2.0.5.dist-info/WHEEL,sha256=wUyA8OaulRlbfwMtmQsvNngGrxQHAvkKcvRmdizlJi0,92
-mcp_sharepoint_us-2.0.5.dist-info/entry_points.txt,sha256=UZOa_7OLI41rmsErbvnSz9RahPMGQVcqZUFMphOcjbY,57
-mcp_sharepoint_us-2.0.5.dist-info/top_level.txt,sha256=R6mRoWe61lz4kUSKGV6S2XVbE7825xfC_J-ouZIYpuo,15
-mcp_sharepoint_us-2.0.5.dist-info/RECORD,,