Andrey Antukh ab1c70115b

🐛 Prevent MCP tokens from being used as access tokens (#10962) ...

MCP tokens now use a separate JWT issuer claim (`urn:penpot:mcp-token`) instead of `access-token`, preventing them from being validated as API access tokens.

Fixes #10960

AI-assisted-by: qwen3.7-plus

2026-07-31 13:19:45 +02:00

..

dev

♻️ Refactor internal organization of system initialization

2026-07-22 14:18:51 +02:00

resources

♻️ Normalize organization naming across Penpot (#10977)

2026-07-31 12:04:10 +02:00

scripts

♻️ Refactor internal organization of system initialization

2026-07-22 14:18:51 +02:00

src

🐛 Prevent MCP tokens from being used as access tokens (#10962)

2026-07-31 13:19:45 +02:00

test/backend_tests

🐛 Prevent MCP tokens from being used as access tokens (#10962)

2026-07-31 13:19:45 +02:00

build.clj

🐛 Fix unexpected exception on logger caused by log4j2 plugin

2023-02-11 00:52:23 +01:00

deps.edn

⬆️ Update dependencies

2026-06-30 16:15:30 +02:00

package.json

📎 Standardize test scripts and add execution discipline docs

2026-07-16 14:57:05 +00:00

pnpm-lock.yaml

⬆️ Update dependencies

2026-06-30 16:15:30 +02:00

pnpm-workspace.yaml

🎉 Migrate to PNPM backend module

2026-01-22 13:55:41 +01:00

tests.edn

🔧 Change backend test runner to kaocha

2024-05-29 19:05:04 +02:00