Skip to content

feat(mcp): add OAuth 2.1 authorization with JWT validation and RFC 9728 metadata #2438

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
asoorm wants to merge 13 commits into from
Closed

feat(mcp): add OAuth 2.1 authorization with JWT validation and RFC 9728 metadata #2438

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
1086e4f
feat(mcp): add OAuth 2.1 authorization with JWT validation and per-to…
asoorm Jan 9, 2026
b3ee5f8
feat(mcp): add per-tool scope verification and random port allocation…
asoorm Jan 21, 2026
8cfe29a
docs(mcp): clarify error code ranges to avoid JSON-RPC conflicts
asoorm Jan 21, 2026
ffcac86
feat(mcp): migrate to official modelcontextprotocol/go-sdk
asoorm Jan 21, 2026
bfadb5e
fix(mcp): improve error handling and security hardening
asoorm Feb 3, 2026
0494ad8
WIP
asoorm Feb 25, 2026
9b89cba
refactor(mcp): restructure OAuth scope config with typed fields
asoorm Feb 26, 2026
981d2d4
feat(mcp): implement configurable scope challenge modes
asoorm Feb 26, 2026
3670cac
fix(mcp): fail-closed when OAuth enabled without JWKS providers
asoorm Feb 26, 2026
272de10
test(mcp): update e2e tests for new OAuth scope config structure
asoorm Feb 26, 2026
f1c5e99
fix(mcp): enforce server base_url when OAuth is enabled
asoorm Feb 26, 2026
8e6cd4d
mcp: scope challenge auth mode override
asoorm Mar 5, 2026
09c8b03
fix(mcp): deduplicate scopes in insufficient_scope challenge response…
asoorm Mar 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 5 additions & 2 deletions client-tests/Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
test-all: test-apollo-js test-apollo-swift test-apollo-kotlin
test-all: test-apollo-js test-apollo-swift test-apollo-kotlin test-mcp-ts

test-apollo-kotlin:
cd apollo-kotlin && ./gradlew test
Expand All @@ -7,4 +7,7 @@ test-apollo-js:
cd apollo-js && pnpm test

test-apollo-swift:
cd apollo-swift && swift test
cd apollo-swift && swift test

test-mcp-ts:
cd mcp-ts && pnpm test
17 changes: 17 additions & 0 deletions client-tests/mcp-ts/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
{
"name": "mcp-ts-client-tests",
"version": "1.0.0",
"description": "MCP client e2e tests using the official TypeScript SDK",
"type": "module",
"scripts": {
"test": "vitest run",
"test:watch": "vitest watch"
},
"packageManager": "pnpm@9.12.3",
"devDependencies": {
"@modelcontextprotocol/sdk": "^1.27.0",
"@types/node": "^22.17.0",
"typescript": "^5.9.2",
"vitest": "^3.2.4"
}
}
Loading