modelcontextprotocol/go-sdk
Watch
1
0
Fork
You've already forked go-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

internal/oauthex: address URL attacks in PRM (#539)

Browse source 
Fix Protected Resource Metadata to prevent URL attacks, as described in
the issue.

For #526
This commit is contained in:
Jonathan Amsterdam 2025-09-30 07:33:59 -04:00 • committed by GitHub
commit fd0dc9d741
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 31 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

4
oauthex/oauthex.go
View file

@ -5,7 +5,9 @@
// Package oauthex implements extensions to OAuth2.
package oauthex
import "github.com/modelcontextprotocol/go-sdk/internal/oauthex"
import (
"github.com/modelcontextprotocol/go-sdk/internal/oauthex"
)
// ProtectedResourceMetadata is the metadata for an OAuth 2.0 protected resource,
// as defined in section 2 of https://www.rfc-editor.org/rfc/rfc9728.html.