Skip to main content

​
fastmcp.server.auth.providers.in_memory

​
Classes

​
InMemoryOAuthProvider

An in-memory OAuth provider for testing purposes. It simulates the OAuth 2.1 flow locally without external calls. Methods:

​
get_client 

get_client(self, client_id: str) -> OAuthClientInformationFull | None

​
register_client 

register_client(self, client_info: OAuthClientInformationFull) -> None

​
authorize 

authorize(self, client: OAuthClientInformationFull, params: AuthorizationParams) -> str
Simulates user authorization and generates an authorization code. Returns a redirect URI with the code and state.

​
load_authorization_code 

load_authorization_code(self, client: OAuthClientInformationFull, authorization_code: str) -> AuthorizationCode | None

​
exchange_authorization_code 

exchange_authorization_code(self, client: OAuthClientInformationFull, authorization_code: AuthorizationCode) -> OAuthToken

​
load_refresh_token 

load_refresh_token(self, client: OAuthClientInformationFull, refresh_token: str) -> RefreshToken | None

​
exchange_refresh_token 

exchange_refresh_token(self, client: OAuthClientInformationFull, refresh_token: RefreshToken, scopes: list[str]) -> OAuthToken

​
load_access_token 

load_access_token(self, token: str) -> AccessToken | None

​
verify_token 

verify_token(self, token: str) -> AccessToken | None
Verify a bearer token and return access info if valid. This method implements the TokenVerifier protocol by delegating to our existing load_access_token method. Args:
  • token: The token string to validate
Returns:
  • AccessToken object if valid, None if invalid or expired

​
revoke_token 

revoke_token(self, token: AccessToken | RefreshToken) -> None
Revokes an access or refresh token and its counterpart.