Skip to content

Conversation

@hashemix
Copy link
Member

@hashemix hashemix commented Nov 7, 2025

📌 Summary

This PR enhances the middleware pipeline, making it more robust and framework-agnostic. It also introduces new middlewares, and DNS rebinding protection has been moved to its own middleware. While this PR does not yet enable it, the plan is to allow developers to define and pass their own custom middlewares to Streamable HTTP servers and SSE in the near future.

🔍 Related Issues

✨ Changes Made

  • Refactored the middleware pipeline for improved ergonomics and robustness
  • Added a new CORS middleware to support CORS for web-based MCP clients (to be available for use soon)
  • Extracted DNS rebinding protection into its own dedicated middleware
  • Updated McpHttpHandler to fully support and integrate with the middleware pipeline

🛠️ Testing Steps

cargo make check

@hashemix hashemix merged commit cc45f1c into main Nov 8, 2025
3 checks passed
@hashemix hashemix mentioned this pull request Nov 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants