modelcontextprotocol/ruby-sdk
Watch
1
0
Fork
You've already forked ruby-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge pull request #354 from koic/reject_non_hash_post_body_in_streamable_http_transport

Browse source 
Reject non-Hash JSON-RPC bodies in `StreamableHTTPTransport`
This commit is contained in:
Koichi ITO 2026-05-18 09:23:57 +09:00 • committed by GitHub
commit 9caba3085d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 73 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

54
test/mcp/server/transports/streamable_http_transport_test.rb
View file

@ -96,6 +96,60 @@ module MCP
assert_equal "Invalid JSON", body["error"]
end
test "POST request with JSON array body returns 400" do
init_request = create_rack_request(
"POST",
"/",
{ "CONTENT_TYPE" => "application/json" },
{ jsonrpc: "2.0", method: "initialize", id: "init" }.to_json,
)
init_response = @transport.handle_request(init_request)
session_id = init_response[1]["Mcp-Session-Id"]
request = create_rack_request(
"POST",
"/",
{
"CONTENT_TYPE" => "application/json",
"HTTP_MCP_SESSION_ID" => session_id,
},
[{ jsonrpc: "2.0", method: "tools/list", id: "list" }].to_json,
)
response = @transport.handle_request(request)
assert_equal 400, response[0]
body = JSON.parse(response[2][0])
assert_includes body["error"], "single JSON-RPC message object"
end
test "POST request with non-object JSON body returns 400" do
init_request = create_rack_request(
"POST",
"/",
{ "CONTENT_TYPE" => "application/json" },
{ jsonrpc: "2.0", method: "initialize", id: "init" }.to_json,
)
init_response = @transport.handle_request(init_request)
session_id = init_response[1]["Mcp-Session-Id"]
request = create_rack_request(
"POST",
"/",
{
"CONTENT_TYPE" => "application/json",
"HTTP_MCP_SESSION_ID" => session_id,
},
"\"foo\"",
)
response = @transport.handle_request(request)
assert_equal 400, response[0]
body = JSON.parse(response[2][0])
assert_includes body["error"], "single JSON-RPC message object"
end
test "handles POST request with initialize method" do
request = create_rack_request(
"POST",