k1nq/TREK
1
0
Fork 0
mirror of https://github.com/mauriceboe/TREK.git synced 2026-06-21 22:31:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(mcp): granular OAuth scopes and per-client rate limiting

Browse Source 
- Split `media:read` into `geo:read` and `weather:read` scopes
- Add dedicated `atlas:read/write` scopes (previously under `places`)
- Add dedicated `todos:read/write` scopes (previously under `collab`)
- Rate limiting now keyed by userId+clientId instead of userId alone
- Bind MCP sessions to the OAuth client that created them
- Log MCP tool calls to audit log with clientId
- Invalidate all MCP sessions on addon state change
- Reduce session sweep interval from 10min to 1min
- Update all translations with new scope labels
This commit is contained in:
jubnl
2026-04-11 02:06:09 +02:00
parent 4670d4914c
commit 535c06bb3f
39 changed files with 1930 additions and 237 deletions
Download Patch File Download Diff File Expand all files Collapse all files
client/src/pages/AdminPage.test.tsx
+4 -4
View File
@@ -321,7 +321,7 @@ describe('AdminPage', () => {
await waitFor(() => expect(screen.getByRole('button', { name: /^users$/i })).toBeInTheDocument());
expect(screen.queryByRole('button', { name: /mcp tokens/i })).not.toBeInTheDocument();
expect(screen.queryByRole('button', { name: /mcp access/i })).not.toBeInTheDocument();
});
it('shows MCP Tokens tab button when MCP addon is enabled', async () => {
@@ -337,7 +337,7 @@ describe('AdminPage', () => {
render(<AdminPage />);
await waitFor(() => {
expect(screen.getByRole('button', { name: /mcp tokens/i })).toBeInTheDocument();
expect(screen.getByRole('button', { name: /mcp access/i })).toBeInTheDocument();
});
});
});
@@ -646,9 +646,9 @@ describe('AdminPage', () => {
seedStore(useAuthStore, { isAuthenticated: true, user: buildAdmin() });
render(<AdminPage />);
await waitFor(() => expect(screen.getByRole('button', { name: /mcp tokens/i })).toBeInTheDocument());
await waitFor(() => expect(screen.getByRole('button', { name: /mcp access/i })).toBeInTheDocument());
fireEvent.click(screen.getByRole('button', { name: /mcp tokens/i }));
fireEvent.click(screen.getByRole('button', { name: /mcp access/i }));
expect(screen.getByTestId('mcp-tokens-panel')).toBeInTheDocument();
});