Sam Thanawalla
9348d33b75
oauthex: move internal/oauthex to oauthex ( #559 )
...
This PR relocates oauthex and moves DCR logic into dcr.go.
Fixes #558
2025-10-07 08:39:49 -04:00
Jonathan Amsterdam
fd0dc9d741
internal/oauthex: address URL attacks in PRM ( #539 )
...
Fix Protected Resource Metadata to prevent URL attacks, as described in
the issue.
For #526
2025-09-30 07:33:59 -04:00
Robert Findley
4f197bc3b4
internal/oauthex: fix license headers ( #430 )
...
The files in the oauthex package used the default Go license header,
rather than the MCP SDK license header (an accident of tooling). We
should fix this while jba@google.com is the only author of this code.
A subsequent PR will add a lint check to prevent this in the future.
2025-09-08 13:36:50 -04:00
Jonathan Amsterdam
2a00640e1e
mcp/internal/oauthex: auth server metadata ( #294 )
...
Implement the Authorization Server Metadata spec.
2025-09-05 14:17:21 -04:00
Jonathan Amsterdam
29c1650e2a
internal/oauthex: OAuth extensions ( #125 )
...
Add a package for the extensions to OAuth 2.0 required by MCP.
This first PR adds Protected Resource Metadata.
2025-09-03 14:20:53 -04:00
