http

May 5, 2026

Changes in this version

+ type Middleware func(http.Handler) http.Handler

Apr 24, 2026

Changes in this version

+ func MaxBodyMiddleware(maxBytes int64) func(http.Handler) http.Handler

+ func WellKnownHandlerWithGenerator(cfgState *config.StaticConfigState, oauthState *oauth.State, ...) http.Handler

+ type DefaultMetadataGenerator struct

+ func (g *DefaultMetadataGenerator) GenerateAuthorizationServerMetadata(oidcConfig map[string]interface{}) map[string]interface{}

+ func (g *DefaultMetadataGenerator) GenerateProtectedResourceMetadata(oidcConfig map[string]interface{}, authorizationServerURL string) map[string]interface{}

+ type WellKnownMetadataGenerator interface

+ GenerateAuthorizationServerMetadata func(oidcConfig map[string]interface{}) map[string]interface{}

+ GenerateProtectedResourceMetadata func(oidcConfig map[string]interface{}, authorizationServerURL string) map[string]interface{}

Oct 10, 2025

Changes in this version

type KubernetesApiTokenVerifier

+ GetTargetParameterName func() string

Aug 8, 2025

Changes in this version

+ var WellKnownEndpoints = []string

+ func WellKnownHandler(staticConfig *config.StaticConfig) http.Handler

type JWTClaims

+ Token string

+ func (c *JWTClaims) ValidateOffline(audience string) error

+ func (c *JWTClaims) ValidateWithKubernetesApi(ctx context.Context, audience string, verifier KubernetesApiTokenVerifier) error

+ func (c *JWTClaims) ValidateWithProvider(ctx context.Context, audience string, provider *oidc.Provider) error

+ type KubernetesApiTokenVerifier interface

+ KubernetesApiVerifyToken func(ctx context.Context, token, audience string) (*authenticationapiv1.UserInfo, []string, error)

+ type SecurityTokenService struct

+ ClientId string

+ ClientSecret string

+ ExternalAccountAudience string

+ ExternalAccountScopes []string

+ func NewFromConfig(config *config.StaticConfig, provider *oidc.Provider) *SecurityTokenService

+ func (sts *SecurityTokenService) ExternalAccountTokenExchange(ctx context.Context, originalToken *oauth2.Token) (*oauth2.Token, error)

+ func (sts *SecurityTokenService) IsEnabled() bool

+ type WellKnown struct

+ func (w WellKnown) ServeHTTP(writer http.ResponseWriter, request *http.Request)

Jul 31, 2025

Changes in this version

+ const Audience

+ func AuthorizationMiddleware(requireOAuth bool, serverURL string, oidcProvider *oidc.Provider, ...) func(http.Handler) http.Handler

+ func RequestMiddleware(next http.Handler) http.Handler

+ func Serve(ctx context.Context, mcpServer *mcp.Server, staticConfig *config.StaticConfig, ...) error

+ type JWTClaims struct

+ Scope string

+ func ParseJWTClaims(token string) (*JWTClaims, error)

+ func (c *JWTClaims) GetScopes() []string

+ func (c *JWTClaims) Validate(audience string) error