746 B
746 B
| @modelcontextprotocol/server | @modelcontextprotocol/express | @modelcontextprotocol/codemod |
|---|---|---|
| minor | patch | patch |
Add runtime-neutral Bearer authentication to @modelcontextprotocol/server:
requireBearerAuth gates web-standard fetch(request) hosts (Cloudflare
Workers, Deno, Bun, Hono), built on the exported verifyBearerToken and
bearerAuthChallengeResponse pieces, with OAuthTokenVerifier now defined
here. The Express middleware adapts the same core and is unchanged in
behavior, except that WWW-Authenticate challenge values are now RFC 7235
quoted-string sanitized (quotes and backslashes escaped, control and
non-ASCII characters replaced); @modelcontextprotocol/express re-exports
OAuthTokenVerifier as before.