Search results

[vMCP] RestoreSession reconstructs a partial auth.Identity (Subject only), breaks cross-pod failover with upstream-auth strategies

authentication

bugSomething isn't workingSomething isn't working

goPull requests that update go codePull requests that update go code

vmcpVirtual MCP Server related issuesVirtual MCP Server related issues

Status: Open.

#5336 In stacklok/toolhive;

· jhrozek opened on May 19, 2026

[vMCP] Extend identity-refresh integration test to wire TokenValidator.Middleware + fake UpstreamTokenRefresher

authentication

goPull requests that update go codePull requests that update go code

vmcpVirtual MCP Server related issuesVirtual MCP Server related issues

Status: Open.

#5334 In stacklok/toolhive;

· tgrunnagle opened on May 19, 2026

[vMCP] Consolidate duplicate identity-propagation round-trippers into shared internal transport package

goPull requests that update go codePull requests that update go code

refactor

vmcpVirtual MCP Server related issuesVirtual MCP Server related issues

Status: Open.

#5333 In stacklok/toolhive;

· tgrunnagle opened on May 19, 2026

Admit obo in MCPExternalAuthConfig CRD enum and regenerate manifests

apiItems related to the APIItems related to the API

auth

kubernetesItems related to KubernetesItems related to Kubernetes

operator

Status: Open.

Task 📋

#5329 In stacklok/toolhive;

· tgrunnagle opened on May 19, 2026

Wire OBO dispatch arms and reconciler branch; add integration tests

auth

controller

operator

testing

Status: Open.

Task 📋

#5328 In stacklok/toolhive;

· tgrunnagle opened on May 19, 2026

Add default OBO handler hooks and vMCP/proxy converter stubs

auth

operator

proxy

vmcpVirtual MCP Server related issuesVirtual MCP Server related issues

Status: Open.

Task 📋

#5327 In stacklok/toolhive;

· tgrunnagle opened on May 19, 2026

Factor thv-operator main into app.Run(); add proxyrunner Run helper

cliChanges that impact CLI functionalityChanges that impact CLI functionality

operator

refactor

Status: Open.

Task 📋

#5326 In stacklok/toolhive;

· tgrunnagle opened on May 19, 2026

Add obo external auth type and function-pointer override hooks

applied-aiApplied AI teamApplied AI team

auth

enhancementNew feature or requestNew feature or request

kubernetesItems related to KubernetesItems related to Kubernetes

operator

Status: Open.

Story 🗺️

#5325 In stacklok/toolhive;

· tgrunnagle opened on May 19, 2026

[vMCP] identityPropagatingRoundTripper captures stale identity, bypassing per-request upstream token refresh

authentication

bugSomething isn't workingSomething isn't working

goPull requests that update go codePull requests that update go code

vmcpVirtual MCP Server related issuesVirtual MCP Server related issues

Status: Open.

#5323 In stacklok/toolhive;

· tgrunnagle opened on May 19, 2026

Embedded auth server rejects DCR from confidential MCP clients (token_endpoint_auth_method hardcoded to none)

authentication

enhancementNew feature or requestNew feature or request

oauth

Status: Open.

#5321 In stacklok/toolhive;

· nuclon opened on May 19, 2026

vMCP terminates MCP session on every legitimate access-token refresh

authentication

bugSomething isn't workingSomething isn't working

vmcpVirtual MCP Server related issuesVirtual MCP Server related issues

Status: Open.

#5306 In stacklok/toolhive;

· jhrozek opened on May 17, 2026

Add OpenAI-compatible embedding client to vmcp optimizer

enhancementNew feature or requestNew feature or request

vmcpVirtual MCP Server related issuesVirtual MCP Server related issues

Status: Open.

#5305 In stacklok/toolhive;

· gabrielcosi opened on May 17, 2026