modelcontextprotocol/go-sdk
Watch
1
0
Fork
You've already forked go-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2
go-sdk/auth
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Robert Findley 18cd63599d
 auth, mcp: add UserID to TokenInfo for session hijacking prevention (#695) 
Add a UserID field to auth.TokenInfo that TokenVerifiers can populate
from JWT "sub" claims or token introspection. The streamable HTTP
transport uses this to bind sessions to users, rejecting requests where
the user ID doesn't match the session's original user.

Fixes #589
2025-12-08 14:32:33 -05:00
..
auth.go auth, mcp: add UserID to TokenInfo for session hijacking prevention (#695) 2025-12-08 14:32:33 -05:00
auth_test.go add HTTP Request to TokenVerifier (#404) 2025-09-03 16:23:42 -04:00
client.go auth: change OAuthHandler to take http Request and Response (#603) 2025-10-29 10:08:40 -04:00
client_test.go auth: change OAuthHandler to take http Request and Response (#603) 2025-10-29 10:08:40 -04:00