3 Commits (3b064ce097054ade057e80644d345fb90215d564)

Author	SHA1	Message	Date
Ortes	21d0b6bf3e	feat(mcp): OAuth 2.1 authorization for the /mcp endpoint ... Adds Doorkeeper-backed OAuth 2.1 (PKCE, public clients, RFC 7591 DCR) so Claude connectors can authorize against DocuSeal without a pre-shared token. The existing McpToken bearer stays as a fallback. - Mount Doorkeeper at /oauth/* plus root aliases (/authorize, /token, /register) for clients that strip paths - Serve RFC 8414 + RFC 9728 discovery at /.well-known/oauth-* - /register implements RFC 7591 DCR for public clients with an IP throttle; redirect_uri restricted to https + loopback - McpController now resolves current_user from a Doorkeeper access token first, emits the RFC 9728 WWW-Authenticate header on 401 - Weekly sweeper for abandoned DCR applications (external cron) - Link Connected apps from MCP settings Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2 weeks ago
Pete Matsyburka	b4d137c0de	remove flash	2 months ago
Alex Turchyn	62a969d8fe	add MCP support	2 months ago