Commit Graph

5 Commits

Author SHA1 Message Date
colorlink c63762487c feat(oauth): add Dynamic Client Registration (RFC 7591) so Claude.ai can connect
- /oauth/register creates a public (PKCE) client; client_id uses 'mcpc_' prefix so it is
  NOT accepted as a raw bearer by TokenManager::resolve() — only the human-approved JWT works
- registered redirect_uris stored + enforced exactly at /authorize
- registration_endpoint advertised in AS metadata
- fixes Claude.ai reconnect loop (DCR was missing; /oauth/register was 404)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Q8t9GEyyLZbUQu26na1JQg
2026-10-16 21:43:32 +00:00
colorlink 9ef2066c1e security: PKCE S256 verification + redirect_uri allowlist + JWT access tokens 2026-05-08 22:08:24 +00:00
colorlink f5d82ac3dd fix: output raw HTML from authorize endpoint, bypass REST JSON wrapper 2026-05-08 21:45:30 +00:00
colorlink 3b2bcf0932 feat: full authorization_code OAuth flow with approval UI 2026-05-08 21:40:21 +00:00
colorlink 8a7ee01de6 feat: OAuth 2.0 client_credentials server for Claude.ai connector 2026-05-08 21:35:58 +00:00