mcp-sharepoint-us 2.0.5__tar.gz → 2.0.7__tar.gz

{mcp_sharepoint_us-2.0.5 → mcp_sharepoint_us-2.0.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mcp-sharepoint-us
-Version: 2.0.5
+Version: 2.0.7
 Summary: SharePoint MCP Server with Modern Azure AD Authentication
 License: MIT
 Project-URL: Homepage, https://github.com/mdev26/mcp-sharepoint-us

{mcp_sharepoint_us-2.0.5 → mcp_sharepoint_us-2.0.7}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "mcp-sharepoint-us"
-version = "2.0.5"
+version = "2.0.7"
 description = "SharePoint MCP Server with Modern Azure AD Authentication"
 readme = "README.md"
 requires-python = ">=3.10"

{mcp_sharepoint_us-2.0.5 → mcp_sharepoint_us-2.0.7}/src/mcp_sharepoint/auth.py

@@ -7,6 +7,7 @@ import logging
 import time
 import random
 from typing import Optional
+from urllib.parse import urlparse
 from office365.sharepoint.client_context import ClientContext
 from office365.runtime.auth.client_credential import ClientCredential
 import msal
@@ -69,12 +70,22 @@ class SharePointAuthenticator:
             # Optional: enable MSAL token cache (in-memory). Helps reduce calls.
             self._token_cache = getattr(self, "_token_cache", msal.SerializableTokenCache())
 
-            self._msal_app = msal.ConfidentialClientApplication(
-                authority=authority_url,
-                client_id=self.client_id,
-                client_credential=self.client_secret,
-                token_cache=self._token_cache,
-            )
+            # For government cloud, disable instance discovery to prevent
+            # MSAL from trying to connect to commercial cloud endpoints
+            msal_params = {
+                "authority": authority_url,
+                "client_id": self.client_id,
+                "client_credential": self.client_secret,
+                "token_cache": self._token_cache,
+            }
+
+            # Disable instance discovery for sovereign clouds to avoid
+            # hitting login.microsoftonline.com endpoints
+            if self.cloud in ("government", "us"):
+                msal_params["validate_authority"] = False
+                logger.info("Disabled authority validation for government cloud")
+
+            self._msal_app = msal.ConfidentialClientApplication(**msal_params)
             self._authority_url = authority_url
 
         # Small in-memory access-token cache (avoid repeated acquire calls)
@@ -83,7 +94,13 @@ class SharePointAuthenticator:
             self._access_token = None
             self._access_token_exp = 0
 
-        scopes = [f"{self.site_url}/.default"]
+        # Extract root SharePoint URL for scope
+        # For https://tenant.sharepoint.us/sites/SiteName -> https://tenant.sharepoint.us
+        parsed = urlparse(self.site_url)
+        sharepoint_root = f"{parsed.scheme}://{parsed.netloc}"
+        scopes = [f"{sharepoint_root}/.default"]
+
+        logger.info(f"Using SharePoint root scope: {sharepoint_root}/.default")
 
         def acquire_token() -> str:
             """

{mcp_sharepoint_us-2.0.5 → mcp_sharepoint_us-2.0.7}/src/mcp_sharepoint_us.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mcp-sharepoint-us
-Version: 2.0.5
+Version: 2.0.7
 Summary: SharePoint MCP Server with Modern Azure AD Authentication
 License: MIT
 Project-URL: Homepage, https://github.com/mdev26/mcp-sharepoint-us