Yaroslav
12cbafe54d
oauthex: oauth discovery checks ( #1220 )
...
add extra checks for the default oauth discovery client:
* disallow redirects which downgrade to http
* disallow redirects to localhost or private ip
* disallow the initial call to a private ip
* proxy configuration opts out of dial time checking
2026-09-02 21:07:19 +02:00
..
authutil
mcp: add optional issuer validator for pre-registered client validation (SEP-2352) ( #946 )
2026-05-29 12:46:34 +00:00
docs
oauthex: oauth discovery checks ( #1220 )
2026-09-02 21:07:19 +02:00
json
internal/json: json nesting depth check ( #1200 )
2026-08-27 10:47:08 +02:00
jsonrpc2
jsonrpc2: wrap write error in server-closing error ( #1186 )
2026-08-27 14:12:53 +00:00
mcpgodebug
mcp: update JSON marshaling to not HTML-escape messages ( #769 )
2026-01-30 17:13:30 +01:00
oauthtest
auth: validate unadvertised RFC 9207 iss instead of rejecting it ( #1187 )
2026-08-25 09:26:17 +00:00
readme
mcp: add docs for tier 1 assessment ( #1195 )
2026-08-24 12:00:59 +02:00
util
oauthex: oauth discovery checks ( #1220 )
2026-09-02 21:07:19 +02:00
xcontext
x/tools: modernize interface{} -> any
2025-02-19 15:14:27 -08:00