update

bookstack_mcp/config.py

@@ -59,6 +59,8 @@ class Settings:
     oidc_verify_id_token: bool = False
     oidc_groups_claim: str = "groups"
     oidc_scopes: list[str] = field(default_factory=list)
+    oidc_forward_resource: bool = True
+    oidc_required_scopes: list[str] = field(default_factory=list)
 
     # --- Who may use the server (applies to both GitHub and OIDC) ---
     allowed_users: list[str] = field(default_factory=list)
@@ -101,6 +103,8 @@ class Settings:
             oidc_verify_id_token=_bool("OIDC_VERIFY_ID_TOKEN", False),
             oidc_groups_claim=os.environ.get("OIDC_GROUPS_CLAIM", "groups"),
             oidc_scopes=_list("OIDC_SCOPES"),
+            oidc_forward_resource=_bool("OIDC_FORWARD_RESOURCE", True),
+            oidc_required_scopes=_list("OIDC_REQUIRED_SCOPES"),
             # GITHUB_ALLOWED_USERS is the old name, still honoured.
             allowed_users=[
                 u.lower() for u in (_list("MCP_ALLOWED_USERS") or _list("GITHUB_ALLOWED_USERS"))