-
Notifications
You must be signed in to change notification settings - Fork 336
Do not merge/hackathon 2025 #968
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Draft
qbey
wants to merge
15
commits into
main
Choose a base branch
from
do-not-merge/hackathon-2025
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Draft
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
d2d523e
to
aec1604
Compare
5719c0c
to
b73c31b
Compare
328f0e6
to
0f32206
Compare
Our authentication flow uses the Django authentication which creates a session for the User. Then the session is used to make API calls, therefore we don't need to accept OIDC tokens directly on the API. Accepting the OIDC token on the API can allow to bypass the "resource server mode" which allows to restrict provided information according to the Service Provider which makes the request.
The previous `ServerToServerAuthentication` was raising authentication failed error if anything is wrong (the header, the token) which prevents any possibility to have several authentication backends.
This provides a base configuration to allow to access all API via OIDC resource server authentication.
15b91ad
to
b7dff08
Compare
This provides: - a frontend to allow user to create/delete User Token - the authentication process to allow any API to be called when authenticating with a User Token.
443a35a
to
3d2f03c
Compare
This provides a way to start a local MCP server: - provided a user token, the MCP can create document - can be run locally and work with cursor or mcphost
Provide the helm chart declaration to deploy the MCP server.
Publish the Docker images to deploy on a dedicated instance for the Hackdays.
Publish the MCP Docker image on our registry.
667b8f9
to
4a81e15
Compare
8c0b72d
to
f459c56
Compare
Instance with this banch: https://docs-ia.beta.numerique.gouv.fr/ |
Get the content of a document in markdown format. Ex: http://localhost:8071/api/v1.0/documents/<ID>/content/
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Purpose
Provide a branch to allow simple developments during the oncoming hackathon.
Please note the authentication in this PR is global and not restricted to some endpoints. We strongly advise to not deploy this as it is.
Add resource server authentication
Capture.video.du.2025-05-14.09-58-13.mp4
Add user token authentication
Capture.video.du.2025-05-14.15-00-46.mp4
Use with
curl -X GET "http://localhost:8071/api/v1.0/documents/" -H "Authorization: Token <generated-token>"
Add a local MCP server
Thanks to the user token, we can deploy a local MCP server to use with
cursor
ormcphost
.Please check the documentation in
./src/mcp_server/README.md
file.Capture.video.du.2025-05-16.18-05-08.mp4
Capture.video.du.2025-05-19.11-33-55.mp4
Proposal