modelcontextprotocol/python-sdk
Watch
1
0
Fork
You've already forked python-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[v1.x] Validate the authorization server metadata issuer on every discovery path (#3431)

Browse source
This commit is contained in:
Max 2026-09-04 18:40:26 +01:00 • committed by GitHub
commit 3eed7ce0a6
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 1323 additions and 90 deletions
Download patch file Download diff file Expand all files Collapse all files

9
.github/actions/conformance/expected-failures.yml vendored
View file

@ -1,4 +1,11 @@
# Known conformance test failures for v1.x
# These are tracked and should be removed as they're fixed.
server: []
client: []
client:
# The pinned harness (0.1.13) serves authorization server metadata whose `issuer`
# omits the tenant path its resource metadata advertises (`/tenant1`), so a client
# that checks RFC 8414 section 3.3 refuses it. The mock includes the path from
# conformance 0.1.15 (modelcontextprotocol/conformance#152); drop these two entries
# when the pin moves past it.
- auth/metadata-var2
- auth/metadata-var3