mcp

func Auth401Interceptor ¶

func Auth401Interceptor(resourceMetadataURL string, scopes []string) middleware.Middleware

Auth401Interceptor creates a middleware that adds WWW-Authenticate header on 401 responses. resourceMetadataURL is the URL to the OAuth protected resource metadata endpoint. scopes is the space-delimited scope list advertised in the challenge so MCP clients pick the resource's required scopes (MCP 2025-06-18 §Authorization scope selection) instead of falling back to the authorization server's scopes_supported.