Author	SHA1	Message	Date
Basil Hosmer	78f87bbeb4	Fix lint errors and add missing rate limiting to MCP endpoints ... - Remove unused mcpAuthMetadataRouter import - Fix authMetadata type (use Record<string, unknown> instead of any) - Add rate limiting to all MCP endpoints (/mcp, /sse, /message)	2025-10-07 17:24:14 -04:00
Basil Hosmer	695f9f68ae	Add customization guide and fix broken doc references ... - Create docs/customization-guide.md with guidance on replacing demo functionality - Add customization section to main README - Fix all references to renamed oauth-architecture-patterns.md - Update repository structure comments to clarify what to replace vs keep	2025-10-07 17:08:10 -04:00
Basil Hosmer	78a7d1c1d0	Deduplicate OAuth provider replacement docs ... Consolidate three redundant 'Production Replacement' sections into a single canonical location in docs/oauth-architecture-patterns.md. Both server READMEs now point to this guide.	2025-10-07 16:56:03 -04:00
Basil Hosmer	1140815c7b	Add graceful degradation when auth server unavailable ... Server starts immediately and retries auth connection in background. Splash page and health endpoint remain accessible in degraded mode.	2025-10-07 14:36:33 -04:00
Basil Hosmer	5482d905a9	Fix security vulnerabilities identified by CodeQL ... - Fix information exposure: return generic error instead of stack traces in sse.ts - Add missing rate limiting to root route in index.ts	2025-10-06 21:38:33 -04:00
Basil Hosmer	c03a9b4e77	Remove embedded OAuth implementation and flatten directory structure ... Simplified the repository to have a single OAuth pattern with separate auth and MCP servers at the top level. Preserved embedded OAuth documentation as an alternative pattern.	2025-10-06 21:30:14 -04:00