Add per-user MCP auth flow - #276

Merged

AjayThorve merged 24 commits into

developfrom

feat/per-user-mcp-auth

Jul 2, 2026

Commits on Jul 2, 2026

Add per-user MCP auth flow

ashan-nv
authored and
AjayThorve
committed
dad3cd1
Remove unrelated per-user auth changes

ashan-nv
authored and
AjayThorve
committed
d6ec8ec
Trim verbose comments in per-user MCP auth code

ashan-nv
authored and
AjayThorve
committed
6b2a4f9
Pin nvidia-nat to 1.8.0 and surface connect failures in the data sources panel

ashan-nv
authored and
AjayThorve
committed
85edee0
Poll backend status so protected sources leave Connecting after OAuth redirect

ashan-nv
authored and
AjayThorve
committed
d8dd7b4
Deploy Redis token store for per-user MCP auth in Compose and Helm

ashan-nv
authored and
AjayThorve
committed
3280efa
Update job route and submit tests for per-user MCP auth changes

ashan-nv
authored and
AjayThorve
committed
d251491
Avoid internal MCP URL default and document NAT private-API surface

ashan-nv
authored and
AjayThorve
committed
650d59c
Stop publishing Redis on the host and clarify token-store password note

ashan-nv
authored and
AjayThorve
committed
040ed31
Add serviceless SQLite MCP token store and fix per-user MCP auth connect, chat, and compose deploy

ashan-nv
authored and
AjayThorve
committed
686281d
Install workspace source package dependencies in deploy image so the backend starts

ashan-nv
authored and
AjayThorve
committed
76f128f
Address review feedback: close pruned OAuth clients, guard tool-source collisions, gate bulk toggle, document 409, and add tests

ashan-nv
authored and
AjayThorve
committed
c19600c
Invalidate expired MCP tokens at job time and refresh source status on panel open so the UI no longer shows a dead source as connected

ashan-nv
authored and
AjayThorve
committed
2446407
Genericize internal NVIDIA MaaS hostname in public MCP source config defaults

ashan-nv
authored and
AjayThorve
committed
ac613af
fix(mcp-auth): address P1 review findings on per-user MCP auth

authored and
AjayThorve
committed
d672de1
fix(deep-research): make per-user MCP sources work on the deep-research path

authored and
AjayThorve
committed
db62871
fix(mcp-auth): reconcile unusable protected sources in selection and job time

authored and
AjayThorve
committed
b4c690f
test(mcp-auth): update submit tests for develop rebase integration

authored and
AjayThorve
committed
715cc5b
refactor(config): move per-user MCP auth into its own config

authored and
AjayThorve
committed
f5c4655
fix(mcp-auth): address REST-submit and popup-security review findings

authored and
AjayThorve
committed
7bbf592
enforce deep research source routing
AjayThorve
committed
0ca82eb
make per-user auth deployments opt-in
AjayThorve
committed
5a0ebe7
document per-user MCP authentication
AjayThorve
committed
9265195
Attach NVSkills validation signatures
svc-nvskills-signing
committed
6f6be71

Navigation Menu

Add per-user MCP auth flow - #276

Add per-user MCP auth flow#276
AjayThorve merged 24 commits into
developfrom
feat/per-user-mcp-auth

Commits on Jul 2, 2026

Add per-user MCP auth flow

Remove unrelated per-user auth changes

Trim verbose comments in per-user MCP auth code

Pin nvidia-nat to 1.8.0 and surface connect failures in the data sources panel

Poll backend status so protected sources leave Connecting after OAuth redirect

Deploy Redis token store for per-user MCP auth in Compose and Helm

Update job route and submit tests for per-user MCP auth changes

Avoid internal MCP URL default and document NAT private-API surface

Stop publishing Redis on the host and clarify token-store password note

Add serviceless SQLite MCP token store and fix per-user MCP auth connect, chat, and compose deploy

Install workspace source package dependencies in deploy image so the backend starts

Address review feedback: close pruned OAuth clients, guard tool-source collisions, gate bulk toggle, document 409, and add tests

Invalidate expired MCP tokens at job time and refresh source status on panel open so the UI no longer shows a dead source as connected

Genericize internal NVIDIA MaaS hostname in public MCP source config defaults

fix(mcp-auth): address P1 review findings on per-user MCP auth

fix(deep-research): make per-user MCP sources work on the deep-research path

fix(mcp-auth): reconcile unusable protected sources in selection and job time

test(mcp-auth): update submit tests for develop rebase integration

refactor(config): move per-user MCP auth into its own config

fix(mcp-auth): address REST-submit and popup-security review findings

enforce deep research source routing

make per-user auth deployments opt-in

document per-user MCP authentication

Attach NVSkills validation signatures