Verify authenticated MCP HTTP transport and shutdown #13

Merged
karsten merged 1 commit from test/mcp-http-auth into main 2026-10-23 11:42:50 +00:00
Owner

Add loopback integration coverage for real PI-backed Harness MCP client: environment-referenced random per-test credential, valid tool execution, invalid auth denial without execution, session continuity and correctly addressed DELETE cleanup, plus output credential checks.197tests/typecheck pass; previous Linux197 run and build pass. Review PASS after strengthening DELETE validation. Resolve previous PR guard false-positive by rewording a prose phrase incorrectly matching generic token regex; exact original PR guard now passes on complete diff. No scanner bypass or security policy change, no real credential tracked. Docs retain clear tested boundaries (no OAuth or production validation).

Add loopback integration coverage for real PI-backed Harness MCP client: environment-referenced random per-test credential, valid tool execution, invalid auth denial without execution, session continuity and correctly addressed DELETE cleanup, plus output credential checks.197tests/typecheck pass; previous Linux197 run and build pass. Review PASS after strengthening DELETE validation. Resolve previous PR guard false-positive by rewording a prose phrase incorrectly matching generic token regex; exact original PR guard now passes on complete diff. No scanner bypass or security policy change, no real credential tracked. Docs retain clear tested boundaries (no OAuth or production validation).
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
harness/core!13
No description provided.