Skip to content

[2.1] fix(mcp): keep only known oauth scopes - #36445

Merged
Vishnuujain merged 1 commit into
2.1from
backport/2.1/pr-36270
Oct 29, 2026
Merged

Vishnuujain merged 1 commit into
2.1from
backport/2.1/pr-36270

Conversation

@gh-bot-collate

Copy link
Copy Markdown

Automated backport of #36270 to 2.1.

Source PR #36270
Author @Vishnuujain
Merge commit 85ab0a75c3772f6b593d6996942e24c927d23d0b
Method Clean cherry-pick — identical to the commit on main.

Opened from openmetadata-collate, which holds the credentials needed to open a PR here. It merges itself once this branch's required checks pass — no review needed. If a check fails it stays open and the author of #36270 is asked to look.

resolver run

* fix(mcp): limit scopes per oauth request

* scope dedupe and revoke

* refresh it and javadoc

* known scopes instead of cap

(cherry picked from commit 85ab0a7)
@gh-bot-collate gh-bot-collate Bot added the safe to test Add this label to run secure Github workflows on PRs label Oct 28, 2026
@gh-bot-collate

Copy link
Copy Markdown
Author

🤖 This backport will not merge itself: 2.1 has no required status checks, so there is nothing for auto-merge to wait on. Merge it by hand once CI is green.

@gh-bot-collate gh-bot-collate Bot mentioned this pull request Oct 28, 2026
1 task done
@Vishnuujain
Vishnuujain merged commit 4eb8c26 into 2.1 Oct 29, 2026
103 checks passed
@Vishnuujain
Vishnuujain deleted the backport/2.1/pr-36270 branch October 29, 2026 08:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

safe to test Add this label to run secure Github workflows on PRs

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant