fix CI

yczhang-nv · yczhang-nv · commit fa4fc3183e25 · 2025-10-02T10:26:13.000-07:00
Signed-off-by: Yuchen Zhang &lt;yuchenz@nvidia.com&gt;
diff --git a/docs/source/workflows/mcp/mcp-auth-token-storage.md b/docs/source/workflows/mcp/mcp-auth-token-storage.md
@@ -60,7 +60,9 @@ persistent and also unsafe.
 
 For production environments, configure an external object store to persist tokens across restarts. The NeMo Agent toolkit supports S3-compatible storage (MinIO, AWS S3), MySQL, and Redis backends.
 
-> **Note**: For detailed object store setup instructions including MinIO, MySQL, and Redis installation and configuration examples, see the [Object Store User Report Example](../../../../examples/object_store/user_report/README.md#choose-an-object-store).
+:::{note}
+For detailed object store setup instructions including MinIO, MySQL, and Redis installation and configuration examples, see the `examples/object_store/user_report/README.md` guide (under the "Choose an Object Store" section).
+:::
 
 The following example shows token storage configuration using S3-compatible storage (MinIO):
 
diff --git a/tests/nat/authentication/test_oauth_exchanger.py b/tests/nat/authentication/test_oauth_exchanger.py
@@ -173,11 +173,13 @@ async def fail_cb(*_a, **_kw):
 
     client = OAuth2AuthCodeFlowProvider(cfg)
     past = datetime.now(UTC) - timedelta(seconds=1)
-    client._authenticated_tokens["bob"] = AuthResult(
-        credentials=[BearerTokenCred(token="stale")],  # type: ignore[arg-type]
-        token_expires_at=past,
-        raw={"refresh_token": "refTok"},
-    )
+    await client._token_storage.store(
+        "bob",
+        AuthResult(
+            credentials=[BearerTokenCred(token="stale")],  # type: ignore[arg-type]
+            token_expires_at=past,
+            raw={"refresh_token": "refTok"},
+        ))
 
     res = await client.authenticate("bob")
     assert res.credentials[0].token.get_secret_value() == "newTok"
@@ -222,11 +224,13 @@ async def cb(conf, flow):
 
     client = OAuth2AuthCodeFlowProvider(cfg)
     past = datetime.now(UTC) - timedelta(minutes=1)
-    client._authenticated_tokens["eve"] = AuthResult(
-        credentials=[BearerTokenCred(token="old")],  # type: ignore[arg-type]
-        token_expires_at=past,
-        raw={"refresh_token": "badTok"},
-    )
+    await client._token_storage.store(
+        "eve",
+        AuthResult(
+            credentials=[BearerTokenCred(token="old")],  # type: ignore[arg-type]
+            token_expires_at=past,
+            raw={"refresh_token": "badTok"},
+        ))
 
     res = await client.authenticate("eve")
     assert hits["n"] == 1
