Add AuthSettings.validate_token_resource to check a bearer token's resource (#3447)

2026-09-05 03:35:55 +01:00 · 2026-09-05 03:35:55 +01:00 · 0c9136841f
commit 0c9136841f
parent 9771e6b59c
1 changed files with 293 additions and 41 deletions
--- a/tests/docs_src/test_identity_assertion.py
+++ b/tests/docs_src/test_identity_assertion.py
@ -151,6 +151,7 @@ async def test_the_whole_grant_is_one_token_request() -> None:
            issuer_url=AnyHttpUrl(tutorial002.ISSUER),
            resource_server_url=AnyHttpUrl(MCP_SERVER_URL),
            required_scopes=["notes:read"],
+            validate_token_resource=True,
        ),
    )