pomerium/authorize
Denis Mishin 8fa26c63f5
mcp: fix authorization header removal (#5719)
## Summary

Remove Authorization header for the MCP server upstream.

## Related issues

Fix https://github.com/pomerium/pomerium/issues/5718

## User Explanation

<!-- How would you explain this change to the user? If this
change doesn't create any user-facing changes, you can leave
this blank. If filled out, add the `docs` label -->

## Checklist

- [x] reference any related issues
- [x] updated unit tests
- [x] add appropriate label (`enhancement`, `bug`, `breaking`,
`dependencies`, `ci`)
- [x] ready for review
2025-07-10 20:37:07 -04:00
..
checkrequest authorize: refactor logAuthorizeCheck() (#5576) 2025-04-23 09:21:52 -07:00
evaluator mcp: fix authorization header removal (#5719) 2025-07-10 20:37:07 -04:00
internal/store mcp: handle and pass upstream oauth2 tokens (#5595) 2025-05-01 12:42:31 -04:00
access_tracker.go core/go: use hashicorp/go-set (#5278) 2024-10-03 12:59:11 -06:00
access_tracker_test.go chore(deps): bump the go group with 24 updates (#5638) 2025-06-17 09:36:50 -07:00
authorize.go ssh: continuous authorization (#5687) 2025-07-02 12:01:25 -07:00
authorize_int_test.go authorize: move IdP token session creator initialization (#5616)d 2025-05-14 13:54:39 -07:00
authorize_test.go chore(deps): bump the go group with 24 updates (#5638) 2025-06-17 09:36:50 -07:00
check_response.go mcp: fix authorization header removal (#5719) 2025-07-10 20:37:07 -04:00
check_response_grpc.go authorize: handle gRPC requests (#5400) 2024-12-19 08:46:53 -07:00
check_response_test.go mcp: fix authorization header removal (#5719) 2025-07-10 20:37:07 -04:00
databroker.go proxy: use querier cache for user info (#5532) 2025-03-20 09:50:22 -06:00
databroker_test.go chore(deps): bump the go group with 24 updates (#5638) 2025-06-17 09:36:50 -07:00
grpc.go mcp: fix authorization header removal (#5719) 2025-07-10 20:37:07 -04:00
grpc_test.go mcp: respond with jsonrpc error when MCP request is denied (#5694) 2025-07-08 09:07:26 -06:00
log.go authorize: add request body logging (#5696) 2025-07-07 12:12:29 -04:00
log_test.go authorize: add request body logging (#5696) 2025-07-07 12:12:29 -04:00
ssh_grpc.go ssh: update integration tests (#5700) 2025-07-07 19:34:49 -04:00
state.go ssh: continuous authorization (#5687) 2025-07-02 12:01:25 -07:00