chore: add support to fetch redis creds from aws secret (#132)
* chore: add support to fetch redis creds from aws secret
* add more checks to the env vars
* fix: surface Redis/Secrets Manager logs, enable TLS, fail loud on connect
The Redis token-store path had three issues that made it silently
non-functional against a TLS-enabled ElastiCache cluster:
- server.py and aws_secrets.py logged via the stdlib root namespace
(plane_mcp.*), which configure_json_logging() never attaches a handler
to — so every INFO line ("Using Redis...", "Refreshed secret...") was
dropped. Switched to fastmcp's get_logger so they nest under the
configured 'fastmcp' logger.
- The Secrets Manager Redis client was built without TLS. ElastiCache
mandates in-transit encryption whenever AUTH tokens are used, so the
connection failed. Added ssl, defaulting on (REDIS_SSL=false to opt out).
- RedisStore connects lazily, so a bad config looked healthy until the
first OAuth flow. Added an eager PING that raises at startup instead of
silently degrading.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
* chore: add Redis configuration and route prefix options to .env.test
* refactor: move token storage logic to a dedicated module and update tests for isolated environments
---------
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Co-authored-by: akhil-vamshi-konam <konamakhilvamshi@gmail.com> P
pratapalakshmi committed
0c843e8596b0784a6065644c857088f882d122e3
Parent: 369889e
Committed by GitHub <noreply@github.com>
on 6/4/2026, 12:27:59 PM