Add subject and claims to AccessToken (#2686)

2026-05-26 14:13:55 +01:00 · 2026-05-26 14:13:55 +01:00 · 3eb579948a
commit 3eb579948a
parent e8e6484278
1 changed files with 27 additions and 2 deletions
--- a/examples/servers/simple-auth/mcp_simple_auth/token_verifier.py
+++ b/examples/servers/simple-auth/mcp_simple_auth/token_verifier.py
@ -75,6 +75,8 @@ class IntrospectionTokenVerifier(TokenVerifier):
                    scopes=data.get("scope", "").split() if data.get("scope") else [],
                    expires_at=data.get("exp"),
                    resource=data.get("aud"),  # Include resource in token
+                    subject=data.get("sub"),  # RFC 7662 subject (resource owner)
+                    claims=data,
                )
            except Exception as e:
                logger.warning(f"Token introspection failed: {e}")