modelcontextprotocol/typescript-sdk
Watch
1
0
Fork
You've already forked typescript-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

fix: use authorization_server_url as issuer when fetching metadata (#763)

Browse source
This commit is contained in:
Jonathan Wang 2025-07-15 00:24:10 +08:00 • committed by GitHub
commit f3584f2a41
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

6
src/client/auth.test.ts
View file

@ -1778,7 +1778,7 @@ describe("OAuth Authorization", () => {
status: 200,
json: async () => ({
resource: "https://my.resource.com/",
authorization_servers: ["https://auth.example.com/"],
authorization_servers: ["https://auth.example.com/oauth"],
}),
});
} else if (urlString === "https://auth.example.com/.well-known/oauth-authorization-server/path/name") {
@ -1821,8 +1821,8 @@ describe("OAuth Authorization", () => {
// First call should be to PRM
expect(calls[0][0].toString()).toBe("https://my.resource.com/.well-known/oauth-protected-resource/path/name");
// Second call should be to AS metadata with the path from serverUrl
expect(calls[1][0].toString()).toBe("https://auth.example.com/.well-known/oauth-authorization-server/path/name");
// Second call should be to AS metadata with the path from authorization server
expect(calls[1][0].toString()).toBe("https://auth.example.com/.well-known/oauth-authorization-server/oauth");
});
});

2
src/client/auth.ts
View file

@ -606,7 +606,7 @@ export async function discoverOAuthMetadata(
protocolVersion ??= LATEST_PROTOCOL_VERSION;
const response = await discoverMetadataWithFallback(
issuer,
authorizationServerUrl,
'oauth-authorization-server',
{
protocolVersion,