modelcontextprotocol/ruby-sdk
Watch
1
0
Fork
You've already forked ruby-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge pull request #304 from koic/validate_post_content_type

Browse source 
Validate Content-Type on POST requests
This commit is contained in:
Koichi ITO 2026-04-10 11:26:13 +09:00 • committed by GitHub
commit 17334c2e8b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 60 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

45
test/mcp/server/transports/streamable_http_transport_test.rb
View file

@ -1143,6 +1143,51 @@ module MCP
assert_equal "Method not allowed", body["error"]
end
test "POST request without Content-Type returns 415" do
request = create_rack_request_without_accept(
"POST",
"/",
{ "HTTP_ACCEPT" => "application/json, text/event-stream" },
{ jsonrpc: "2.0", method: "initialize", id: "123" }.to_json,
)
response = @transport.handle_request(request)
assert_equal 415, response[0]
body = JSON.parse(response[2][0])
assert_equal "Unsupported Media Type: Content-Type must be application/json", body["error"]
end
test "POST request with wrong Content-Type returns 415" do
request = create_rack_request_without_accept(
"POST",
"/",
{
"CONTENT_TYPE" => "text/plain",
"HTTP_ACCEPT" => "application/json, text/event-stream",
},
{ jsonrpc: "2.0", method: "initialize", id: "123" }.to_json,
)
response = @transport.handle_request(request)
assert_equal 415, response[0]
end
test "POST request with Content-Type including charset succeeds" do
request = create_rack_request_without_accept(
"POST",
"/",
{
"CONTENT_TYPE" => "application/json; charset=utf-8",
"HTTP_ACCEPT" => "application/json, text/event-stream",
},
{ jsonrpc: "2.0", method: "initialize", id: "123" }.to_json,
)
response = @transport.handle_request(request)
assert_equal 200, response[0]
end
test "POST request without Accept header returns 406" do
request = create_rack_request_without_accept(
"POST",