• Joined on 2026-03-27
mathias pushed to main at mathias/template-go-web 2026-07-03 21:33:47 +00:00
8a22a28ab4 fix(template): parameterize scaffold with __PROJECT_NAME__/__MODULE_PATH__ (gitea-mcp#44)
mathias closed issue mathias/gitea-mcp#9 2026-07-03 21:18:14 +00:00
auth: no audit logging of authentication failures
mathias closed issue mathias/gitea-mcp#10 2026-07-03 21:18:13 +00:00
auth: CallerMiddleware header priority order is undocumented
mathias commented on issue mathias/gitea-mcp#6 2026-07-03 21:18:08 +00:00
auth: silent JWT degradation when Dex is unreachable

Closed across two layers.

Already shipped in gitea-mcp (present before this pass): /healthz reports the JWT validator state — disabled (DEX_ISSUER_URL unset) / enabled / degraded

mathias commented on issue mathias/gitea-mcp#9 2026-07-03 21:18:00 +00:00
auth: no audit logging of authentication failures

Done — the bearer auth now lives in the shared mcp-chassis (v0.3.0), adopted by gitea-mcp v0.5.0.

BearerMiddleware emits a structured slog line on every rejection:

  • reason — one of…
mathias commented on issue mathias/gitea-mcp#10 2026-07-03 21:17:52 +00:00
auth: CallerMiddleware header priority order is undocumented

Done in gitea-mcp v0.5.0.

CallerMiddleware (internal/auth/caller.go) now:

  • Documents the precedence in a doc comment: X-Auth-Request-User (the verified OIDC identity oauth2-proxy sets)…
mathias pushed tag v0.5.0 to mathias/gitea-mcp 2026-07-03 21:17:40 +00:00
mathias pushed to main at mathias/gitea-mcp 2026-07-03 21:17:40 +00:00
72ba89be63 feat(auth): adopt chassis v0.3.0 — auth audit logs + 503 on Dex outage (#6, #9)
9b7f53bdda feat(auth): document caller header precedence + warn on conflict (#10)
Compare 2 commits »
mathias closed issue mathias/gitea-mcp#6 2026-07-03 21:17:39 +00:00
auth: silent JWT degradation when Dex is unreachable
mathias pushed tag v0.3.0 to mathias/mcp-chassis 2026-07-03 21:16:34 +00:00
mathias pushed to main at mathias/mcp-chassis 2026-07-03 21:16:34 +00:00
d5aa5b992c feat(auth): audit-log rejections + 503 on Dex outage (gitea-mcp#9, #6)
mathias closed issue mathias/gitea-mcp#39 2026-07-03 20:48:57 +00:00
chore: rename Go module path gitea.d-ma.be → git.d-ma.be
mathias closed issue mathias/gitea-mcp#35 2026-07-03 20:48:56 +00:00
feat: close claude.ai-surface gaps — direct-to-main write, PR create/merge, owner repo listing
mathias closed issue mathias/gitea-mcp#37 2026-07-03 20:48:55 +00:00
Validate required owner/name at tool layer — empty repo arg leaks a bare 404
mathias commented on issue mathias/gitea-mcp#39 2026-07-03 20:48:47 +00:00
chore: rename Go module path gitea.d-ma.be → git.d-ma.be

Done in v0.4.2 (commit on main).

Sequencing gate was already satisfied — mcp-chassis migrated to git.d-ma.be in 3329ff3 (go.mod requires git.d-ma.be/mathias/mcp-chassis v0.2.0). So the…

mathias commented on issue mathias/gitea-mcp#35 2026-07-03 20:48:43 +00:00
feat: close claude.ai-surface gaps — direct-to-main write, PR create/merge, owner repo listing

Resolved as of v0.4.2 — all three friction points are closed:

  1. Direct-to-main writefile_write_branch already commits directly to any existing branch: BranchExists→true skips…
mathias commented on issue mathias/gitea-mcp#37 2026-07-03 20:48:37 +00:00
Validate required owner/name at tool layer — empty repo arg leaks a bare 404

Done in v0.4.2 (commit on main).

parseArgs now validates, via reflection, that repo/name string args are non-empty and returns a typed ErrValidation naming the field — before the…

mathias pushed to main at mathias/gitea-mcp 2026-07-03 20:48:27 +00:00
4c1f36f9eb chore(rename): module gitea.d-ma.be → git.d-ma.be/mathias/gitea-mcp (#39)
99586984bf docs(file_write_branch): clarify direct-to-main + PR-flow in descriptor (#35)
e0bede0547 fix(tools): reject empty repo/name identifier at tool layer (#37)
Compare 3 commits »
mathias pushed tag v0.4.2 to mathias/gitea-mcp 2026-07-03 20:48:27 +00:00
mathias closed issue mathias/gitea-mcp#45 2026-07-03 19:58:19 +00:00
PR tools advertise index, not the canonical number — finish the #38 flip