all: clean up Go 1.24 specific code. (#850)

This commit is contained in:
Maciej Kisiel 2026-03-20 12:28:56 +01:00 • committed by GitHub
commit ea161959d7
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -411,8 +411,7 @@ user's responsibility to wrap that function around all handlers in their server.
- _Secure session IDs_. This SDK generates cryptographically secure session IDs by default.
If you create your own with
[`ServerOptions.GetSessionID`](https://pkg.go.dev/github.com/modelcontextprotocol/go-sdk/mcp#ServerOptions.GetSessionID), it is your responsibility to ensure they are secure.
If you are using Go 1.24 or above,
we recommend using [`crypto/rand.Text`](https://pkg.go.dev/crypto/rand#Text)
We recommend using [`crypto/rand.Text`](https://pkg.go.dev/crypto/rand#Text).
- _Binding session IDs to user information_. The SDK supports this mitigation through
[`TokenInfo.UserID`](https://pkg.go.dev/github.com/modelcontextprotocol/go-sdk/auth#TokenInfo.UserID).