Skip to content

Implementation of SEP835 : Scope parameter parsing from WWW-Authenticate headers #595

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
fizy069 wants to merge 4 commits into from
+499 −6
Closed

Implementation of SEP835 : Scope parameter parsing from WWW-Authenticate headers #595

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
2c60c65
Add WWW-Authenticate scope extraction and 403 handling
fizy069 Dec 19, 2025
2d4310b
feat(auth): implement SEP-835 runtime scope upgrade flow
fizy069 Dec 19, 2025
5fe1e41
Merge branch 'main' into authz-updates
fizy069 Feb 1, 2026
a72b907
Merge branch 'main' into authz-updates
fizy069 Feb 1, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
feat(auth): implement SEP-835 runtime scope upgrade flow 
- Add ScopeUpgradeConfig for configurable retry limits
- Track granted scopes in StoredCredentials and AuthorizationManager
- Implement scope union computation for progressive authorization
- Add request_scope_upgrade() for 403 insufficient_scope handling
- Add select_scopes() with WWW-Authenticate priority per SEP-835
- Export new types: ScopeUpgradeConfig, WWWAuthenticateParams, AuthClient
  • Loading branch information
@fizy069
fizy069 committed Dec 20, 2025
commit 2d4310bbf5db3b5d2df896aceb8eb3bd609501ef
5 changes: 4 additions & 1 deletion crates/rmcp/src/transport.rs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -99,7 +99,10 @@ pub use io::stdio;
pub mod auth;
#[cfg(feature = "auth")]
#[cfg_attr(docsrs, doc(cfg(feature = "auth")))]
pub use auth::{AuthError, AuthorizationManager, AuthorizationSession, AuthorizedHttpClient};
pub use auth::{
AuthClient, AuthError, AuthorizationManager, AuthorizationSession, AuthorizedHttpClient,
ScopeUpgradeConfig, StoredCredentials, WWWAuthenticateParams,
};

// #[cfg(feature = "transport-ws")]
// #[cfg_attr(docsrs, doc(cfg(feature = "transport-ws")))]
Expand Down
Loading