modelcontextprotocol/typescript-sdk
Watch
1
0
Fork
You've already forked typescript-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Validate redirect URIs _as_ URIs

Browse source
This commit is contained in:
Justin Spahr-Summers 2025-02-17 14:46:08 +00:00
commit 54f643cee8
No known key found for this signature in database
1 changed files with 13 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

3
src/shared/auth.ts
View file

@ -1,4 +1,5 @@
import { z } from "zod";
import { isValidUrl } from "../server/auth/validation.js";
/**
* RFC 8414 OAuth 2.0 Authorization Server Metadata
@ -61,7 +62,7 @@ export const OAuthErrorSchema = z
* RFC 7591 OAuth 2.0 Dynamic Client Registration metadata
*/
export const OAuthClientMetadataSchema = z.object({
redirect_uris: z.array(z.string()),
redirect_uris: z.array(z.string()).refine((uris) => uris.every(isValidUrl), { message: "redirect_uris must contain valid URLs" }),
token_endpoint_auth_method: z.string().optional(),
grant_types: z.array(z.string()).optional(),
response_types: z.array(z.string()).optional(),