Skip to content

mcp: add optional issuer validator for pre-registered client validation (SEP-2352)#946

Merged
guglielmo-san merged 5 commits into
mainfrom
guglielmoc/SEP-2352_authorization_server_binding
May 29, 2026
Merged

mcp: add optional issuer validator for pre-registered client validation (SEP-2352)#946
guglielmo-san merged 5 commits into
mainfrom
guglielmoc/SEP-2352_authorization_server_binding

Conversation

@guglielmo-san
Copy link
Copy Markdown
Contributor

@guglielmo-san guglielmo-san commented May 6, 2026

Fixes #978

@guglielmo-san guglielmo-san changed the title mcp: add optional issuer validator for pre-registered client validation mcp: add optional issuer validator for pre-registered client validation (SEP-2352) May 27, 2026
@guglielmo-san guglielmo-san marked this pull request as ready for review May 27, 2026 10:12
Comment thread internal/authutil/util.go Outdated
// parameter, which the MCP authorization spec requires to be compared without
// any normalization.
func IssuersEqual(a, b string) bool {
return strings.TrimRight(a, "/") == strings.TrimRight(b, "/")
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

TrimRight will trim all slashes, let's use TrimsSuffix

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ok, also updated the code in auth_meta to follow same logic... it is a behavioral change but it was not yet added to any release

Comment thread auth/authorization_code_test.go Outdated
Comment thread internal/authutil/util.go
@guglielmo-san guglielmo-san enabled auto-merge (squash) May 29, 2026 12:45
@guglielmo-san guglielmo-san merged commit dfb45f1 into main May 29, 2026
9 checks passed
@guglielmo-san guglielmo-san deleted the guglielmoc/SEP-2352_authorization_server_binding branch May 29, 2026 12:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Implement SEP-2352

2 participants