Validate OAuth authorization state (#1726)

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
2026-07-27 12:24:02 -07:00 · 2026-07-27 12:24:02 -07:00 · 9c635ffed1
commit 9c635ffed1
parent 950ac7c1bc
1 changed files with 170 additions and 26 deletions
--- a/tests/ModelContextProtocol.AspNetCore.Tests/OAuth/OAuthTestBase.cs
+++ b/tests/ModelContextProtocol.AspNetCore.Tests/OAuth/OAuthTestBase.cs
@ -120,6 +120,7 @@ public abstract class OAuthTestBase : KestrelInMemoryTest, IAsyncDisposable
            return new ModelContextProtocol.Authentication.AuthorizationResult
            {
                Code = queryParams["code"],
+                State = queryParams["state"],
                Iss = queryParams.TryGetValue("iss", out var iss) ? (string?)iss : null,
            };
        }