ayrisdev/yargi-mcp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Disable manual scope validation in tools

Browse Source 
- Comment out scope check in search_bedesten_unified tool
- Authentication already handled by Bearer auth provider
- Eliminates development mode fallback due to empty scopes
- Fixes 'Insufficient permissions' error with Clerk JWT tokens

Resolves JWT token scope validation warning in logs
This commit is contained in:
saidsurucu
2025-07-23 16:08:45 +03:00
parent 0a80bc535b
commit b401bad890
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mcp_server_main.py
+3 -3
View File
@@ -1104,9 +1104,9 @@ For best results, use exact phrases with quotes for legal terms."""),
user_id = access_token.client_id
user_scopes = access_token.scopes
# Check for required scopes
if "yargi.read" not in user_scopes and "yargi.search" not in user_scopes:
raise ToolError(f"Insufficient permissions: 'yargi.read' or 'yargi.search' scope required. Current scopes: {user_scopes}")
# Check for required scopes - DISABLED: Already handled by Bearer auth provider
# if "yargi.read" not in user_scopes and "yargi.search" not in user_scopes:
# raise ToolError(f"Insufficient permissions: 'yargi.read' or 'yargi.search' scope required. Current scopes: {user_scopes}")
logger.info(f"Tool 'search_bedesten_unified' called by user '{user_id}' with scopes {user_scopes}")