finos / finos/fluxnova-plugins
[Feature] Incorporate MCP Endpoint security with Fluxnova authorized
- Dominant language
- Java
- Stars
- 3
- Forks
- 7
- Avg merge
- 5d 4h
- Merged PRs (30d)
- 3
Description
### Description of Problem
Provides security to MCP endpoints (/sse and /mcp) by provoding a basic credential check, using the Fluxnova engine's identity service, which then checks the user is authorized to query the resource that the invoked tool is attempting to retrieve.
### Potential Solutions
This feature has been party developed, but dropped due to maintainers not actively pursuing this feature. If anyone is keen to resurrect and maintain, see PR https://github.com/finos/fluxnova-plugins/pull/5
Contributor guide
Research direction
Start by reviewing the referenced PR #5 and tracing the /sse and /mcp MCP endpoints. Examine how the Fluxnova engine's identity service checks credentials and authorization for the resource an invoked tool retrieves. Done means the endpoints perform the described credential and resource-authorization checks, with the relevant behavior covered by the existing project tests.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- authentication, authorization, backend-api-design, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100