modelcontextprotocol/rust-sdk
Watch
1
0
Fork
You've already forked rust-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

feat: validate OAuth authorization response issuer (#896)

Browse source 
* feat: validate OAuth authorization response issuer

* fix: tighten issuer validation callbacks
This commit is contained in:
Michael Neale 2026-06-10 13:08:31 +10:00 • committed by GitHub
commit 2d3d1879ad
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 420 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

4
examples/clients/src/auth/oauth_client.rs
View file

@ -38,6 +38,7 @@ struct AppState {
struct CallbackParams {
code: String,
state: String,
iss: Option<String>,
}
async fn callback_handler(
@ -150,6 +151,7 @@ async fn main() -> Result<()> {
let CallbackParams {
code: auth_code,
state: csrf_token,
iss,
} = code_receiver
.await
.context("Failed to get authorization code")?;
@ -157,7 +159,7 @@ async fn main() -> Result<()> {
// Exchange code for access token
tracing::info!("Exchanging authorization code for access token...");
oauth_state
.handle_callback(&auth_code, &csrf_token)
.handle_callback_with_issuer(&auth_code, &csrf_token, iss.as_deref())
.await
.context("Failed to handle callback")?;
tracing::info!("Successfully obtained access token");