modelcontextprotocol/go-sdk
Watch
1
0
Fork
You've already forked go-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2
go-sdk/oauthex
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Rob Findley 307e32c2b3 oauthex: validate URL schemes in auth server metadata and DCR 
Use URL scheme validation for remaining URL fields in auth
datastructures (AuthServerMeta and ClientRegistrationMetadata), to
prevent XSS attacks.

By comparison, the typescript SDK doesn't validate
introspection_endpoint, and I don't know why. Otherwise the
implementations align.

Fixes #526
2025-12-11 10:09:43 -05:00
..
testdata oauthex: move internal/oauthex to oauthex (#559) 2025-10-07 08:39:49 -04:00
auth_meta.go oauthex: validate URL schemes in auth server metadata and DCR 2025-12-11 10:09:43 -05:00
auth_meta_test.go Add Check PCKE Support (#563) 2025-10-14 11:09:28 -04:00
dcr.go oauthex: validate URL schemes in auth server metadata and DCR 2025-12-11 10:09:43 -05:00
dcr_test.go oauthex: move internal/oauthex to oauthex (#559) 2025-10-07 08:39:49 -04:00
oauth2.go oauthex: move internal/oauthex to oauthex (#559) 2025-10-07 08:39:49 -04:00
oauth2_test.go internal/oauthex: fix GetProtectedResourceMetadataFromHeader validation (#561) 2025-10-08 09:30:51 -04:00
oauthex.go oauthex: move internal/oauthex to oauthex (#559) 2025-10-07 08:39:49 -04:00
oauthex_test.go oauthex: update fake oauth server (#564) 2025-10-09 10:38:54 -04:00
resource_meta.go internal/oauthex: fix GetProtectedResourceMetadataFromHeader validation (#561) 2025-10-08 09:30:51 -04:00
url_scheme_test.go oauthex: validate URL schemes in auth server metadata and DCR 2025-12-11 10:09:43 -05:00