-
chore: release v0.8.0a3 — pin fastmcp==3.4.2 (fixes claude.ai connector) (#1818)
frostbyte_neo 发布于
2026-07-06 05:25:07 +00:00 fastmcp 3.4.3 added a Host/Origin guard that rejects any request whose Host
isn't its localhost/testserver allowlist — including the deployment's own
public origin — so claude.ai's OAuth discovery fetch of
/.well-known/oauth-protected-resource/mcp got a non-200 and dead-ended with
"Couldn't connect to the server." The unpinned mcp extra (fastmcp>=3.0,<4)
floated the published 0.8.0a2 Docker image to 3.4.3 at build time even though
the client code was unchanged.- Pin mcp extra to fastmcp==3.4.2 (last-good); re-lock uv.lock.
- Add two regression guards in test_selfhosted_oauth.py that drive the full
http_app() under a realistic Host and assert the RFC 9728 metadata + DCR
succeed. Verified: pass on 3.4.2, fail on 3.4.3. - Verified end-to-end against the live connector (register→login→token→
tools/list, 34 tools) on 3.4.2.
Claude-Session: https://claude.ai/code/session_01EB8mwAvNpxq228pSLp5QaW
Co-authored-by: Claude noreply@anthropic.com
下载附件