PrefectHQ/fastmcp v3.4.7

v3.4.7: Know Your Audience

on GitHub

FastMCP 3.4.7 restores CIMD private_key_jwt authentication for OAuthProxy deployments at a bare origin. Client assertions are now validated against the exact token endpoint advertised in authorization server metadata, eliminating the doubled-slash audience mismatch.

What's Changed

Security 🔒

• Backport CIMD assertion audience fix to v3 by @jlowin in #4799

Docs 📚

• Docs: add v3.4.7 changelog entries by @jlowin in #4810

Full Changelog: v3.4.6...v3.4.7