stacklok / toolhive / 19707385407

51%

Build Type

push

github

Committed by web-flow

Commit Message

Add header injection authentication support (#2730)

* Add header injection authentication support

Implement header injection authentication type for MCPExternalAuthConfig,
enabling backend MCP servers to receive custom authentication headers.

Changes:
- Add HeaderInjectionConfig to CRD with headerName and value/valueSecretRef
- Implement converter registry pattern for extensible auth type handling
- Create HeaderInjectionConverter for header_injection strategy
- Refactor TokenExchangeConverter to use new registry pattern
- Update RBAC rules to grant vMCP access to mcpexternalauthconfigs
- Add controllerutil support for header injection validation
- Bump operator CRD chart version to 0.0.63
- Include example YAML demonstrating header injection usage

Header injection allows backends to authenticate using custom HTTP headers
(e.g., X-API-Key) with values from either direct configuration or K8s secrets.

The converter registry provides a clean abstraction for adding new auth types
without modifying core authentication logic, following the Open/Closed Principle.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

* fixes from review

---------

Co-authored-by: taskbot <taskbot@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>

Run Details

177 of 213 new or added lines in 8 files covered. (83.1%)

6 existing lines in 2 files now uncovered.

25204 of 50925 relevant lines covered (49.49%)

58.82 hits per line