fix(auth-for-mcp): prevent caching of PRM endpoints in python examples (#68)

Author: patrickkang

auth-for-mcp/fastmcp-mcp-customtokenexchange-python/src/auth0/__init__.py

@@ -13,6 +13,7 @@
 from mcp.server.auth.routes import create_protected_resource_routes
 from mcp.server.fastmcp import FastMCP
 from starlette.middleware import Middleware
+from starlette.middleware.base import BaseHTTPMiddleware
 from starlette.requests import Request
 from starlette.responses import JSONResponse, Response
 from starlette.routing import Route, Router
@@ -80,7 +81,14 @@ def auth_metadata_router(self) -> Router:
             resource_name=self.name,
         )
 
-        return Router(routes=routes)
+        # Middleware to override cache headers
+        class NoCacheMiddleware(BaseHTTPMiddleware):
+            async def dispatch(self, request: Request, call_next: Callable) -> Response:
+                response = await call_next(request)
+                response.headers["Cache-Control"] = "no-store, no-cache, must-revalidate, max-age=0"
+                return response
+
+        return Router(routes=routes, middleware=[Middleware(NoCacheMiddleware)])
 
     def auth_middleware(self) -> list[Middleware]:
         return [Middleware(

auth-for-mcp/fastmcp-mcp-customtokenexchange-python/src/server.py

@@ -38,7 +38,7 @@ async def lifespan(app: Starlette) -> AsyncIterator[None]:
     debug=config.debug,
     routes=[
         # Add discovery metadata route
-        *auth0_mcp.auth_metadata_router().routes,
+        Mount("/", app=auth0_mcp.auth_metadata_router()),
 
         # Main MCP app route with authentication middleware
         Mount(

auth-for-mcp/fastmcp-mcp-python/src/auth0/__init__.py

@@ -13,6 +13,7 @@
 from mcp.server.auth.routes import create_protected_resource_routes
 from mcp.server.fastmcp import FastMCP
 from starlette.middleware import Middleware
+from starlette.middleware.base import BaseHTTPMiddleware
 from starlette.requests import Request
 from starlette.responses import JSONResponse, Response
 from starlette.routing import Route, Router
@@ -67,7 +68,14 @@ def auth_metadata_router(self) -> Router:
             resource_name=self.name,
         )
 
-        return Router(routes=routes)
+        # Middleware to override cache headers
+        class NoCacheMiddleware(BaseHTTPMiddleware):
+            async def dispatch(self, request: Request, call_next: Callable) -> Response:
+                response = await call_next(request)
+                response.headers["Cache-Control"] = "no-store, no-cache, must-revalidate, max-age=0"
+                return response
+
+        return Router(routes=routes, middleware=[Middleware(NoCacheMiddleware)])
 
     def auth_middleware(self) -> list[Middleware]:
         return [Middleware(Auth0Middleware, domain=self.domain, audience=self.audience)]

auth-for-mcp/fastmcp-mcp-python/src/server.py

@@ -36,7 +36,7 @@ async def lifespan(app: Starlette) -> AsyncIterator[None]:
     debug=config.debug,
     routes=[
         # Add discovery metadata route
-        *auth0_mcp.auth_metadata_router().routes,
+        Mount("/", app=auth0_mcp.auth_metadata_router()),
 
         # Main MCP app route with authentication middleware
         Mount(