modelcontextprotocol/ext-auth
Watch
1
0
Fork
You've already forked ext-auth
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

format

Browse source
This commit is contained in:
Max Gerber 2026-03-23 08:33:45 -07:00
commit 8b742d80d7
1 changed files with 6 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

12
specification/draft/enterprise-managed-authorization.mdx
View file

@ -181,13 +181,13 @@ Pragma: no-cache
}
```
| Parameter | Required/Optional | Description | Example/Allowed Values |
| ------------------- | ----------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------- |
| `issued_token_type` | REQUIRED | Indicates the type of token issued. | `urn:ietf:params:oauth:token-type:id-jag` |
| Parameter | Required/Optional | Description | Example/Allowed Values |
| ------------------- | ----------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -------------------------------------------------- |
| `issued_token_type` | REQUIRED | Indicates the type of token issued. | `urn:ietf:params:oauth:token-type:id-jag` |
| `access_token` | REQUIRED | The Identity Assertion JWT Authorization Grant. (Note: Token Exchange requires the `access_token` response parameter for historical reasons, not an OAuth access token.) | (JWT string) |
| `token_type` | REQUIRED | The token type. | `N_A` (because this is not an OAuth access token.) |
| `scope` | OPTIONAL/REQUIRED | OPTIONAL if the scope of the issued token is identical to the requested; otherwise REQUIRED. May be fewer scopes than requested. | `scope1 scope2` |
| `expires_in` | RECOMMENDED | The lifetime in seconds of the authorization grant. | `3600` |
| `token_type` | REQUIRED | The token type. | `N_A` (because this is not an OAuth access token.) |
| `scope` | OPTIONAL/REQUIRED | OPTIONAL if the scope of the issued token is identical to the requested; otherwise REQUIRED. May be fewer scopes than requested. | `scope1 scope2` |
| `expires_in` | RECOMMENDED | The lifetime in seconds of the authorization grant. | `3600` |
#### 4.2.1 Error Response