[v1.x] Validate the authorization server metadata issuer on every discovery path - #3431
Merged
Merged
Claude / Claude Code Review
completed
Sep 4, 2026 in 4m 40s
Code review found 1 potential issue
Found 1 candidates, confirmed 1. See review comments for details.
Details
| Severity | Count |
|---|---|
| 🔴 Important | 0 |
| 🟡 Nit | 1 |
| 🟣 Pre-existing | 0 |
| Severity | File:Line | Issue |
|---|---|---|
| 🟡 Nit | src/mcp/client/auth/extensions/client_credentials.py:114 |
nit: the repo's own in-tree callers still construct these providers without 'issuer=', so after merging every conformanc |
Loading