FastMCP 3.4.5 collects five fixes for the 3.x line. The one that prompted it: a single Ed25519 key in a JWKS — which Rauthy, Ory Hydra, and some Keycloak configurations publish by default — made JWTVerifier reject every token, including ones correctly signed by supported keys in the same set.
What's Changed
Fixes 🐞
- Backport #4517 to release/3.x: skip unsupported JWKS keys (#4515) by @kakiii in #4631
- Backport #4469 to release/3.x: fix Azure scope fallback by @jlowin in #4662
- Backport #4523 to release/3.x: serialize deep object query parameters by @jlowin in #4664
- Backport #4564 to release/3.x: make transformed tool required order deterministic by @jlowin in #4665
- Backport #4492 to release/3.x: don't mutate the caller's schema in compress_schema by @jlowin in #4663
Docs 📚
New Contributors
Full Changelog: v3.4.4...v3.4.5