Documentation
¶
Overview ¶
Package auth contains supporting helpers that enable fine-grained client side authorization when talking to an MCP server.
The Authorizer type can be attached to a client via `client.WithAuthInterceptor`. When a request is rejected with a *401 Unauthorized* response it automatically discovers the protected-resource metadata, obtains the necessary OAuth 2.1 token using the RoundTripper from the `transport` sub-package, and transparently retries the call.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Authorizer ¶
type Authorizer struct {
Transport *transport.RoundTripper
}
Authorizer is a fine grain authorization interceptor
func NewAuthorizer ¶ added in v0.2.10
func NewAuthorizer(transport *transport.RoundTripper) *Authorizer
Source Files
Directories
¶
| Path | Synopsis |
|---|---|
|
Package mock provides in-memory and stub implementations that facilitate unit testing of the client-side authorization flow.
|
Package mock provides in-memory and stub implementations that facilitate unit testing of the client-side authorization flow. |
|
Package store defines simple token and client-configuration stores used by the authorization helpers in the parent `auth` package.
|
Package store defines simple token and client-configuration stores used by the authorization helpers in the parent `auth` package. |
|
Package transport implements an http.RoundTripper that performs the OAuth 2.1 [Protected Resource Metadata](https://www.rfc-editor.org/rfc/rfc9728) discovery, token acquisition and automatic request retry logic required by MCP when a server challenges the client with `401 Unauthorized`.
|
Package transport implements an http.RoundTripper that performs the OAuth 2.1 [Protected Resource Metadata](https://www.rfc-editor.org/rfc/rfc9728) discovery, token acquisition and automatic request retry logic required by MCP when a server challenges the client with `401 Unauthorized`. |
Click to show internal directories.
Click to hide internal directories.