From e196f3d77876225d42cba5a1feab9b4258b99719 Mon Sep 17 00:00:00 2001 From: Bartek Wajda Date: Fri, 11 Sep 2026 11:58:37 +0200 Subject: [PATCH] [ibexa/mcp]: Added `security.yaml` MCP firewall --- ibexa/headless/6.0/config/packages/security.yaml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/ibexa/headless/6.0/config/packages/security.yaml b/ibexa/headless/6.0/config/packages/security.yaml index 2126bc5d..c4276bcf 100644 --- a/ibexa/headless/6.0/config/packages/security.yaml +++ b/ibexa/headless/6.0/config/packages/security.yaml @@ -75,7 +75,7 @@ security: # - 'Ibexa\Cdp\Security\CdpRequestAuthenticator' # stateless: true - # Uncomment the rules below to enable JSON Web Token (JWT) authentication for REST and/or GraphQL + # Uncomment the rules below to enable JSON Web Token (JWT) authentication for REST, and/or GraphQL, and/or MCP #ibexa_jwt_rest: # request_matcher: Ibexa\Rest\Security\JWTTokenCreationRESTRequestMatcher # user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker @@ -101,6 +101,13 @@ security: # stateless: true # jwt: ~ + #ibexa_jwt_mcp: + # request_matcher: Ibexa\Mcp\Security\McpRequestMatcher + # user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker + # provider: ibexa + # stateless: true + # jwt: ~ + # Uncomment ibexa_oauth2_connect, ibexa_oauth2_front rules and comment ibexa_front firewall # to enable OAuth2 authentication