[v1.x] Add subject and claims to AccessToken (#2690)

2026-05-26 15:49:44 +01:00 · 2026-05-26 15:49:44 +01:00 · 1abcca2408
commit 1abcca2408
parent 9773a3f75e
1 changed files with 27 additions and 2 deletions
--- a/examples/servers/simple-auth/mcp_simple_auth/token_verifier.py
+++ b/examples/servers/simple-auth/mcp_simple_auth/token_verifier.py
@ -75,6 +75,8 @@ class IntrospectionTokenVerifier(TokenVerifier):
                    scopes=data.get("scope", "").split() if data.get("scope") else [],
                    expires_at=data.get("exp"),
                    resource=data.get("aud"),  # Include resource in token
+                    subject=data.get("sub"),  # RFC 7662 subject (resource owner)
+                    claims=data,
                )
            except Exception as e:
                logger.warning(f"Token introspection failed: {e}")