Add client_secret_basic authentication support (#1334)

Co-authored-by: Paul Carleton <paulc@anthropic.com>
2025-11-20 15:53:37 -05:00 · 2025-11-20 15:53:37 -05:00 · c51936f61f
commit c51936f61f
parent 397089a78e
1 changed files with 695 additions and 59 deletions
--- a/src/mcp/server/auth/handlers/register.py
+++ b/src/mcp/server/auth/handlers/register.py
@ -49,6 +49,11 @@ class RegistrationHandler:
            )

        client_id = str(uuid4())
+
+        # If auth method is None, default to client_secret_post
+        if client_metadata.token_endpoint_auth_method is None:
+            client_metadata.token_endpoint_auth_method = "client_secret_post"
+
        client_secret = None
        if client_metadata.token_endpoint_auth_method != "none":  # pragma: no branch
            # cryptographically secure random 32-byte hex string