stacklok / toolhive / 20308364789

51%

push

github

Add OAuth/OIDC auth config to MCPRegistry CRD (#3057)

Extend the `MCPRegistry` custom resource with authentication
configuration support, enabling the registry API server to
authenticate requests using OAuth/OIDC providers.

The new `MCPRegistryAuthConfig` type supports both anonymous and oauth
modes. The OAuth configuration includes resource metadata, multiple
OIDC provider definitions with JWT validation via JWKS endpoints,
token introspection, and Kubernetes `ServiceAccount` token
authentication. Providers can reference client secrets and CA
certificates from Kubernetes `Secrets` and `ConfigMaps`.

The CRD manifests and Helm chart templates are updated
with the new schema.

111 of 184 new or added lines in 2 files covered. (60.33%)

28015 of 55765 relevant lines covered (50.24%)

57.07 hits per line