Skip to content

v0.3.0

Choose a tag to compare

@rado0x54 rado0x54 released this 17 Mar 15:19
· 10 commits to main since this release
2f37e67

Changes

Breaking

  • Removed issuerUrl option — resource URL (RFC 9728 resource field) is now dynamically derived from request host, Express mount path, and mcpRoute

Changed

  • WWW-Authenticate metadata URL now constructed per RFC 9728 Section 3

Added

  • New protocolHeader option to read protocol from a custom header (e.g. X-Forwarded-Proto)
  • New hostHeader option to read host from a custom header (e.g. X-Forwarded-Host)
  • New resolveBaseUrl helper exported for framework-agnostic usage

See CHANGELOG.md for full details.