modelcontextprotocol/ruby-sdk
Watch
1
0
Fork
You've already forked ruby-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge pull request #439 from koic/issuer_bound_client_credentials

Browse source 
Bind Stored Client Credentials to the Authorization Server Issuer per SEP-2352
This commit is contained in:
Koichi ITO 2026-07-12 02:16:12 +09:00 • committed by GitHub
commit e1fabe3fcb
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 288 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

5
lib/mcp/client/oauth/provider.rb
View file

@ -34,7 +34,10 @@ module MCP
# `WWW-Authenticate` does not specify one.
# - `storage` - Object responding to `tokens`, `save_tokens(tokens)`,
# `client_information`, and `save_client_information(info)`. Defaults to
# an `InMemoryStorage`.
# an `InMemoryStorage`. Persisted `client_information` is stamped with
# an `"issuer"` member binding it to the authorization server that
# issued it (SEP-2352); when the authorization server changes, the SDK discards
# the stale registration and tokens and re-registers.
# - `client_id_metadata_document_url` - URL where the client publishes its Client ID Metadata Document
# (`draft-ietf-oauth-client-id-metadata-document-00` and the MCP authorization specification).
# When the authorization server advertises `client_id_metadata_document_supported: true`,