YueGuobin 89e11d265f

fix(mcp): pass user.token_version when generating temp JWT from API key ...

_resolve_token generated a temp JWT with a hardcoded ver=0 after
validating the API key. Users who had logged out at least once
(token_version >= 1) would hit "Token has been revoked" 401 on
every MCP tool call, because the REST auth chain rejects ver=0
when the user's token_version no longer matches.

Fix: pass the user's actual token_version to create_access_token
so the temp JWT carries the correct ver claim.

2026-07-16 00:51:45 +08:00

..

routes

fix(mcp): pass user.token_version when generating temp JWT from API key

2026-07-16 00:51:45 +08:00

__init__.py

Move endpoints to routes & preparations to use a database.

2020-11-19 15:21:03 +10:30

server.py

Make AI features (AI Copilot + MCP) optional via [ai-features] extra

2026-06-27 10:14:43 +08:00