DX-119909: harden auth warning logging

Author: aniket-s-kulkarni

src/dremioai/servers/mcp.py

@@ -183,12 +183,18 @@ async def dispatch(self, request: Request, call_next: RequestResponseEndpoint):
             and request.url.path.startswith("/mcp")
         ):
             client_host = request.client.host if request.client else "unknown"
+            inst = settings.instance()
+            endpoint = (
+                str(inst.dremio.uri)
+                if inst is not None and inst.dremio is not None and inst.dremio.uri
+                else None
+            )
             self.logger.warning(
                 "Unauthorized request rejected",
                 path=request.url.path,
                 client=client_host,
                 project_id=ProjectIdMiddleware.get_project_id(),
-                endpoint=str(settings.instance().dremio.uri),
+                endpoint=endpoint,
             )
             # Return 401 with WWW-Authenticate header
             return StarletteResponse(

tests/servers/test_jwks_verifier.py

@@ -36,6 +36,7 @@
 from starlette.responses import Response
 
 from dremioai import log
+from dremioai.config import settings
 from dremioai.servers.jwks_verifier import JWKSVerifier, VerifiedClaims, TokenExpiredError
 from dremioai.servers.mcp import (
     FastMCPServerWithAuthToken,
@@ -293,6 +294,7 @@ class TestDispatchWarning:
 
     @pytest.mark.asyncio
     async def test_dispatch_logs_warning_on_401(self, caplog):
+        settings.set_base_settings(settings.Settings())
         middleware = RequireAuthWithWWWAuthenticateMiddleware(app=MagicMock())
 
         mock_user = MagicMock()