Cliff Hall
79d11dc53f
Automatic handling of logging level ( #882 )
...
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
2025-08-27 15:09:07 -04:00
Felix Weinberger
3bc2235d74
chore: bump version to 1.17.4 ( #894 )
2025-08-21 17:08:09 +01:00
Paul Carleton
1f5950be01
[auth] OAuth protected-resource-metadata: fallback on 4xx not just 404 ( #879 )
...
Co-authored-by: adam jones <domdomegg+git@gmail.com>
2025-08-19 15:43:09 +01:00
Paul Carleton
64f7cdd09b
restrict url schemes allowed in oauth metadata ( #877 )
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>
2025-08-19 14:39:21 +00:00
Marcelo Paternostro
abb2f0aa14
feature(middleware): Composable fetch middleware for auth and cross‑cutting concerns ( #485 )
...
Co-authored-by: David Soria Parra <davidsp@anthropic.com>
Co-authored-by: Claude <noreply@anthropic.com>
2025-08-18 14:11:15 +01:00
Felix Weinberger
4a63974049
version: patch to 0.17.3 ( #878 )
2025-08-14 15:55:36 +01:00
bianbianzhu
65119eb7d8
docs: correct parameter schema key in Dynamic Servers documentation ( #789 )
2025-08-14 14:10:27 +00:00
Arjun Kumar
aad33a15a8
fix: pass fetchfn parameter to registerClient and refreshAuthorizatio… ( #850 )
2025-08-14 15:06:18 +01:00
Jatin Sandilya
69d4eb1227
fix: client import & server imports ( #851 )
2025-08-12 16:51:16 +01:00
Dale Seo
4d0977bc91
Fix quit command in Example client with OAuth ( #864 )
2025-08-11 19:23:07 +01:00
Inna Harper
a1608a6513
1.17.2 ( #855 )
2025-08-07 21:28:37 +01:00
Xiao Yijun
f657ead472
fix: retry next endpoint on CORS error during auth server discovery ( #827 )
2025-08-04 15:43:09 +01:00
Inna Harper
0551cc52b8
1.17.1 ( #831 )
2025-07-31 19:33:29 +01:00
Grimmer Kang
31acdcbb18
fix: prevent responses being sent to wrong client when multiple transports connect ( #820 )
2025-07-29 14:07:01 +01:00
Frédéric Barthelet
ee16173865
(fix): Update fallbackRequestHandler type to match _requestHandlers leaves type ( #784 )
2025-07-29 14:06:27 +01:00
Inna Harper
222db4a9c1
Bump version 1.17.0 ( #810 )
2025-07-24 18:15:42 +01:00
dependabot[bot]
b8ec6653eb
Bump form-data from 4.0.2 to 4.0.4 in the npm_and_yarn group across 1 directory ( #798 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-24 18:03:40 +01:00
Theresa
1fc452ea0e
fix: remove extraneous code block in README.md ( #791 )
2025-07-24 17:50:48 +01:00
Xiao Yijun
bb7cccc3ba
feat: support oidc discovery in client sdk ( #652 )
...
Co-authored-by: Paul Carleton <paulc@anthropic.com>
Co-authored-by: Claude <noreply@anthropic.com>
2025-07-24 14:11:48 +01:00
Jonathan Wang
62c608d8ce
fix: Explicitly declare accpet type to json when exchanging oauth token ( #801 )
2025-07-24 13:50:54 +01:00
Mason Chen
83168250f5
Fix indent ( #807 )
2025-07-24 12:49:47 +00:00
Inna Harper
8e15edca0a
update codeowners ( #803 )
2025-07-23 19:10:23 +01:00
Cliff Hall
c7887c082c
Add more robust base64 check ( #786 )
2025-07-21 09:57:40 +01:00
Inna Harper
0d545176f9
Add CODEOWNERS file for dsk ( #781 )
2025-07-18 14:11:21 +01:00
Inna Harper
400b020c85
1.16.0 ( #779 )
2025-07-17 20:18:12 +01:00
Christian Daguerre
2db0dbebe7
fix client id issuance date should only be sent when generated ( #775 )
2025-07-17 18:51:51 +01:00
Luca Chang
9d2a0aeb7b
fix: consistently use consumer-provided fetch function ( #767 )
2025-07-17 17:57:54 +01:00
Jesse
16ea27783c
fix(731): StreamableHTTPClientTransport Fails to Reconnect on Non-Resumable Streams ( #732 )
2025-07-15 17:43:02 +01:00
Jesse
af61a086ae
feat(protocol): Debounce notifications to improve network efficiancy ( #746 )
2025-07-15 09:40:17 +01:00
Jonathan Wang
f3584f2a41
fix: use authorization_server_url as issuer when fetching metadata ( #763 )
2025-07-14 17:24:10 +01:00
Glen Maddern
4b2ad0385d
Adding invalidateCredentials() to OAuthClientProvider ( #570 )
...
Co-authored-by: Paul Carleton <paulc@anthropic.com>
2025-07-14 17:11:52 +01:00
Christian Daguerre
cc9ea7fd21
make client side client_id generation configurable in the oauth router ( #734 )
2025-07-14 17:07:50 +01:00
Nitin Bansal
117781453c
Non-critical: Readme syntax and typographical error fixes ( #765 )
2025-07-14 16:41:10 +01:00
Daniel Kelleher
a9c907dd70
Add prompt=consent for OIDC offline_access scope ( #681 )
2025-07-14 14:47:09 +01:00
Daniel Kelleher
5b99c24bda
Add OIDC ID token support ( #680 )
2025-07-14 12:22:04 +00:00
Inna Harper
5b536abf1b
Merge pull request #729 from modelcontextprotocol/ochafik/spec-type-tests
...
Add type compatibility test between SDK and spec types
2025-07-14 08:38:02 +01:00
Olivier Chafik
cce168c76f
Merge branch 'main' into ochafik/spec-type-tests
2025-07-11 11:50:12 +01:00
Jerome
c6ac083b1b
Bumped version
2025-07-10 16:20:14 +01:00
Inna Harper
9dfd025eb2
Merge pull request #752 from modelcontextprotocol/ochafik/fix-path-as
...
auth: fetch AS metadata in well-known subpath from serverUrl even when PRM returns external AS
2025-07-10 14:53:02 +01:00
Olivier Chafik
1e32f146c8
Update auth.ts
2025-07-10 14:37:10 +01:00
Olivier Chafik
1b8d63ed6d
add metadataServerUrl to discoverMetadataWithFallback to allow external AS
2025-07-10 14:36:34 +01:00
Olivier Chafik
ea8caa9657
Merge branch 'main' into ochafik/fix-path-as
2025-07-10 14:28:57 +01:00
Inna Harper
442e13b60e
Merge pull request #756 from modelcontextprotocol/patch-1
...
Fix oauth well-known paths to retain path and query
2025-07-10 14:26:07 +01:00
Olivier Chafik
de1ade29d4
fix unmerge
2025-07-10 14:25:21 +01:00
Olivier Chafik
9ca7fd298f
Merge branch 'main' into ochafik/fix-path-as
2025-07-10 14:20:48 +01:00
ihrpr
5eacdf174c
fallback and refactor
2025-07-10 11:36:57 +01:00
ihrpr
72cb9a700f
add tests
2025-07-10 09:30:12 +01:00
Jerome
11e84f0471
Merge pull request #751 from modelcontextprotocol/jerome/fix/allow-async-onsession-callbacks
...
feat: support async callbacks for onsessioninitialized and onsessionclosed
2025-07-09 21:04:15 +01:00
Olivier Chafik
031dfc2835
[auth]: support oauth client_secret_basic / none / custom methods ( #720 )
...
* Allow OAuthClientProvider to control authentication to token endpoint w/ addClientAuthentication (exchange / refresh)
* Include mockProvider in exchangeAuthorization tests.
* feature. Add client_secret_basic and none authentication methods
---------
Co-authored-by: Jared Hanson <jaredhanson@gmail.com>
Co-authored-by: SightStudio <sdm3285@gmail.com>
Co-authored-by: Claude <noreply@anthropic.com>
2025-07-09 18:31:09 +01:00
Olivier Chafik
c90537703b
Update auth.ts
...
Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-09 18:09:23 +01:00
