pomerium / pomerium / 22001581795

45%

Build Type

push

github

Committed by web-flow

Commit Message

mcp: add upstream MCP token storage (#6100)

## Summary

Add persistent databroker storage for OAuth tokens acquired from remote
MCP server authorization servers. Tokens are bound to `(user_id,
route_id, upstream_server)` and support basic CRUD operations.

- New `UpstreamMCPToken` protobuf message with composite key fields,
token fields, timestamps, and metadata
- `PutUpstreamMCPToken`, `GetUpstreamMCPToken`, `DeleteUpstreamMCPToken`
on `handlerStorage` interface
- Input validation rejects empty key components
- Indexed `user_id` and `route_id` for future bulk queries
- Fix pre-existing panic in `fieldToValue` for repeated proto fields

## Related issues

- ENG-3556

## User Explanation

No user-facing changes. This adds internal storage infrastructure for
upcoming MCP upstream token management.

## Checklist

- [x] reference any related issues
- [x] updated unit tests
- [ ] add appropriate label (`enhancement`, `bug`, `breaking`,
`dependencies`, `ci`)
- [ ] ready for review

Run Details

69 of 83 new or added lines in 3 files covered. (83.13%)

26 existing lines in 5 files now uncovered.

32464 of 73142 relevant lines covered (44.38%)

117.06 hits per line