Jonathan Amsterdam
fd0dc9d741
internal/oauthex: address URL attacks in PRM ( #539 )
...
Fix Protected Resource Metadata to prevent URL attacks, as described in
the issue.
For #526
2025-09-30 07:33:59 -04:00
Sam Thanawalla
294e1f360c
internal/oauthex: add dynamic client registration ( #519 )
...
This CL implements https://www.rfc-editor.org/rfc/rfc7591.html
See
https://github.com/modelcontextprotocol/typescript-sdk/blob/main/src/client/auth.ts
as a reference.
For #493
2025-09-29 09:29:12 -04:00
Robert Findley
4f197bc3b4
internal/oauthex: fix license headers ( #430 )
...
The files in the oauthex package used the default Go license header,
rather than the MCP SDK license header (an accident of tooling). We
should fix this while jba@google.com is the only author of this code.
A subsequent PR will add a lint check to prevent this in the future.
2025-09-08 13:36:50 -04:00
Jonathan Amsterdam
2a00640e1e
mcp/internal/oauthex: auth server metadata ( #294 )
...
Implement the Authorization Server Metadata spec.
2025-09-05 14:17:21 -04:00
Jonathan Amsterdam
29c1650e2a
internal/oauthex: OAuth extensions ( #125 )
...
Add a package for the extensions to OAuth 2.0 required by MCP.
This first PR adds Protected Resource Metadata.
2025-09-03 14:20:53 -04:00
