Ki)vdZddlmZddlZddlmZmZddlmZddl m Z ddl m Z e e ZGdd eZy) aUDebug token verifier for testing and special cases. This module provides a flexible token verifier that delegates validation to a custom callable. Useful for testing, development, or scenarios where standard verification isn't possible (like opaque tokens without introspection). Example: ```python from fastmcp import FastMCP from fastmcp.server.auth.providers.debug import DebugTokenVerifier # Accept all tokens (default - useful for testing) auth = DebugTokenVerifier() # Custom sync validation logic auth = DebugTokenVerifier(validate=lambda token: token.startswith("valid-")) # Custom async validation logic async def check_cache(token: str) -> bool: return await redis.exists(f"token:{token}") auth = DebugTokenVerifier(validate=check_cache) mcp = FastMCP("My Server", auth=auth) ``` ) annotationsN) AwaitableCallable) TokenVerifier) AccessToken) get_loggercFeZdZdZddddf dfd ZddZxZS) DebugTokenVerifiera Token verifier with custom validation logic. This verifier delegates token validation to a user-provided callable. By default, it accepts all non-empty tokens (useful for testing). Use cases: - Testing: Accept any token without real verification - Development: Custom validation logic for prototyping - Opaque tokens: When you have tokens with no introspection endpoint WARNING: This bypasses standard security checks. Only use in controlled environments or when you understand the security implications. cy)NT)tokens o/home/jay/workspace/scripts/.codegraph-venv/lib/python3.12/site-packages/fastmcp/server/auth/providers/debug.pyzDebugTokenVerifier.:sz debug-clientNcXt||||_||_|xsg|_y)aInitialize the debug token verifier. Args: validate: Callable that takes a token string and returns True if valid. Can be sync or async. Default accepts all tokens. client_id: Client ID to assign to validated tokens scopes: Scopes to assign to validated tokens required_scopes: Required scopes (inherited from TokenVerifier base class) )required_scopesN)super__init__validate client_idscopes)selfrrrr __class__s rrzDebugTokenVerifier.__init__7s." 9  "l rcK|r|jstjdy |j|}t j |r |d{}n|}|stjdyt ||j|jdd|iS7E#t$r"}tjd|dYd}~yd}~wwxYww) zVerify token using custom validation logic. Args: token: The token string to validate Returns: AccessToken if validation succeeds, None otherwise zRejecting empty tokenNz0Token validation failed: callable returned Falser )r rr expires_atclaimszToken validation error: %sT)exc_info) striploggerdebugrinspect isawaitablerrr Exception)rr resultis_valides r verify_tokenzDebugTokenVerifier.verify_tokenMsEKKM LL0 1 ]]5)F""6*!'<! OP..{{'  ("  LL5q4L H sL)C +BBB6C 7%BC B C (CC C  C )rz8Callable[[str], bool] | Callable[[str], Awaitable[bool]]rstrrlist[str] | Nonerr))r r(returnzAccessToken | None)__name__ __module__ __qualname____doc__rr' __classcell__)rs@rr r (sI ".@'#',0 #+# # ! # * #,%rr )r. __future__rr!collections.abcrrfastmcp.server.authrfastmcp.server.auth.authrfastmcp.utilities.loggingrr+rr r rrr5s66#/-00 H JJr