modelcontextprotocol/python-sdk
Watch
1
0
Fork
You've already forked python-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add AuthSettings.validate_token_resource to check a bearer token's resource (#3447)

Browse source
This commit is contained in:
Max 2026-09-05 03:35:55 +01:00 • committed by GitHub
commit 0c9136841f
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 293 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

7
tests/interaction/auth/_provider.py
View file

@ -157,6 +157,7 @@ class InMemoryAuthorizationServerProvider(
token=refresh,
client_id=client.client_id,
scopes=authorization_code.scopes,
resource=authorization_code.resource,
)
del self.codes[authorization_code.code]
return OAuthToken(
@ -183,9 +184,11 @@ class InMemoryAuthorizationServerProvider(
if self._fail_next_refresh:
self._fail_next_refresh = False
raise TokenError(error="invalid_grant", error_description="refresh denied by harness")
access = self.mint_access_token(client_id=client.client_id, scopes=scopes)
access = self.mint_access_token(client_id=client.client_id, scopes=scopes, resource=refresh_token.resource)
new_refresh = f"refresh_{secrets.token_hex(16)}"
self.refresh_tokens[new_refresh] = RefreshToken(token=new_refresh, client_id=client.client_id, scopes=scopes)
self.refresh_tokens[new_refresh] = RefreshToken(
token=new_refresh, client_id=client.client_id, scopes=scopes, resource=refresh_token.resource
)
del self.refresh_tokens[refresh_token.token]
return OAuthToken(
access_token=access,