mathiasandClaude Opus 4.8
72ba89be63
Bumps mcp-chassis to v0.3.0, which adds structured audit logging on every auth rejection and returns 503 temporarily_unavailable (not a silent 401) when Dex is unreachable at validation time. Wires slog.SetDefault so those audit lines flow through gitea-mcp's JSON handler. Together with the earlier /healthz jwt-status reporting and startup degradation warning, this closes #6 (Dex-down is now observable and distinct from a bad token) and #9 (auth failures are audit-logged: reason, IP, token type, hashed fingerprint — never the raw token). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
27 lines
862 B
AMPL
27 lines
862 B
AMPL
module git.d-ma.be/mathias/gitea-mcp
|
|
|
|
go 1.26.2
|
|
|
|
require (
|
|
git.d-ma.be/mathias/mcp-chassis v0.3.0
|
|
github.com/hashicorp/golang-lru/v2 v2.0.7
|
|
github.com/stretchr/testify v1.11.1
|
|
)
|
|
|
|
require (
|
|
github.com/davecgh/go-spew v1.1.1 // indirect
|
|
github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0 // indirect
|
|
github.com/goccy/go-json v0.10.3 // indirect
|
|
github.com/lestrrat-go/blackmagic v1.0.3 // indirect
|
|
github.com/lestrrat-go/httpcc v1.0.1 // indirect
|
|
github.com/lestrrat-go/httprc v1.0.6 // indirect
|
|
github.com/lestrrat-go/iter v1.0.2 // indirect
|
|
github.com/lestrrat-go/jwx/v2 v2.1.6 // indirect
|
|
github.com/lestrrat-go/option v1.0.1 // indirect
|
|
github.com/pmezard/go-difflib v1.0.0 // indirect
|
|
github.com/segmentio/asm v1.2.0 // indirect
|
|
golang.org/x/crypto v0.32.0 // indirect
|
|
golang.org/x/sys v0.31.0 // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
)
|