modelcontextprotocol/go-sdk
Watch
1
0
Fork
You've already forked go-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1
608 commits 1 branch 33 tags 5.3 MiB
Commit graph go-sdk/oauthex/dcr.go
Author SHA1 Message Date
Maciej Kisiel
7b8d81c264
 		all: use case-sensitive JSON unmarshaling (#807) 
As reported in
https://github.com/modelcontextprotocol/go-sdk/issues/805, case
insensitive unmarshaling can pose security issues. This change adjusts
all non-test and non-example unmarshaling to use a case sensitive mode.

This introduces a new external dependency
`github.com/segmentio/encoding`.
 2026-02-18 16:38:36 +01:00
Rob Findley
307e32c2b3 oauthex: validate URL schemes in auth server metadata and DCR 
Use URL scheme validation for remaining URL fields in auth
datastructures (AuthServerMeta and ClientRegistrationMetadata), to
prevent XSS attacks.

By comparison, the typescript SDK doesn't validate
introspection_endpoint, and I don't know why. Otherwise the
implementations align.

Fixes #526
 2025-12-11 10:09:43 -05:00
Sam Thanawalla
9348d33b75
 		oauthex: move internal/oauthex to oauthex (#559) 
This PR relocates oauthex and moves DCR logic into dcr.go.

Fixes #558
 2025-10-07 08:39:49 -04:00
Renamed from internal/oauthex/auth_meta.go (Previous history)