Jakub Zych a1b78b80f5 fix: the MCP dispatch credential carries the personal token id ...

MCPUserGuard.MCPDispatch now sets the in-memory credential's ID to the
subject's TokenID when the subject came from a personal usr_ token (no
ClientID), so a handler running under MCP dispatch can record which
token made a change. An OAuth subject's TokenID names the OAuth
server's token row, so its credential keeps ID 0. The credential is
still never saved.

2026-10-28 11:30:44 +01:00

7.2 KiB

Raw Blame History

View Raw