Method _update_security_for_mcp

api/api/openapi.py:127–155

Update security schemes for MCP (OAuth + API Key fallback).

(
        self, schema: dict[str, Any], oauth: OAuthConfig
    )

        return operation

    def _update_security_for_mcp(
        self, schema: dict[str, Any], oauth: OAuthConfig
    ) -> dict[str, Any]:
        """Update security schemes for MCP (OAuth + API Key fallback)."""
        schema = schema.copy()
        schema["components"] = schema.get("components", {}).copy()
        schema["components"]["securitySchemes"] = {
            "oauth2": {
                "type": "oauth2",
                "flows": {
                    "authorizationCode": {
                        "authorizationUrl": f"{oauth.frontend_url}/oauth/authorize/",
                        "tokenUrl": f"{oauth.api_url}/o/token/",
                        "scopes": oauth.scopes,
                    },
                },
            },
            "TOKEN_AUTH": {
                "type": "apiKey",
                "in": "header",
                "name": "Authorization",
                "description": "Organisation API Key. Format: Api-Key <key>",
            },
        }
        schema["security"] = [
            {"oauth2": list(oauth.scopes.keys())},
            {"TOKEN_AUTH": []},
        ]
        return schema


class TypedDictSchemaExtension(OpenApiSerializerExtension):