modelcontextprotocol/example-remote-server
Watch
1
0
Fork
You've already forked example-remote-server
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Remove embedded OAuth implementation and flatten directory structure

Browse source 
Simplified the repository to have a single OAuth pattern with separate auth and MCP servers at the top level. Preserved embedded OAuth documentation as an alternative pattern.
This commit is contained in:
Basil Hosmer 2025-10-06 21:07:18 -04:00
commit c03a9b4e77
No known key found for this signature in database
1 changed files with 1556 additions and 15846 deletions
Download patch file Download diff file Expand all files Collapse all files

8
docs/session-ownership.md
View file

@ -23,11 +23,11 @@ User ID sources:
When the MCP server validates an access token:
**Embedded OAuth**: Reads `McpInstallation` from Redis, extracts `installation.userId`
1. MCP server calls the auth server's `/introspect` endpoint with the token
2. Auth server validates the token and returns user information including the `sub` field (user ID)
3. MCP server populates `AuthInfo.extra.userId` with this user identifier
**External OAuth**: Calls auth server's `/introspect` endpoint, receives `sub` field
Both result in `AuthInfo.extra.userId` being populated.
This separation allows the auth server to be replaced with any OAuth provider that supports token introspection.
### Session Creation