go-sdk/oauthex
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Maciej Kisiel 6e8ca568e4
all: use case-sensitive JSON unmarshaling (#807)
As reported in
https://github.com/modelcontextprotocol/go-sdk/issues/805, case
insensitive unmarshaling can pose security issues. This change adjusts
all non-test and non-example unmarshaling to use a case sensitive mode.

This introduces a new external dependency
`github.com/segmentio/encoding`.
2026-02-18 16:02:15 +00:00
..
testdata oauthex: move internal/oauthex to oauthex (#559) 2025-10-07 08:39:49 -04:00
auth_meta.go oauthex: validate URL schemes in auth server metadata and DCR 2025-12-11 10:09:43 -05:00
auth_meta_test.go Add Check PCKE Support (#563) 2025-10-14 11:09:28 -04:00
dcr.go all: use case-sensitive JSON unmarshaling (#807) 2026-02-18 16:02:15 +00:00
dcr_test.go oauthex: move internal/oauthex to oauthex (#559) 2025-10-07 08:39:49 -04:00
oauth2.go oauthex: fix content type check in getJSON (#721) 2025-12-12 09:44:26 -05:00
oauth2_test.go internal/oauthex: fix GetProtectedResourceMetadataFromHeader validation (#561) 2025-10-08 09:30:51 -04:00
oauthex.go oauthex: move internal/oauthex to oauthex (#559) 2025-10-07 08:39:49 -04:00
oauthex_test.go oauthex: update fake oauth server (#564) 2025-10-09 10:38:54 -04:00
resource_meta.go internal/oauthex: fix GetProtectedResourceMetadataFromHeader validation (#561) 2025-10-08 09:30:51 -04:00
url_scheme_test.go oauthex: validate URL schemes in auth server metadata and DCR 2025-12-11 10:09:43 -05:00