feat(server): add request-time OAuth scope challenges - #1624

Merged

pcarleton merged 9 commits into

modelcontextprotocol:mainfrom

SamMorrowDrums:scope-challenge-server-sdk

Sep 16, 2026

Commits on Aug 31, 2026

feat(server): add request-time OAuth scope challenges

SamMorrowDrums
and
Copilot
committed
77a01ba
feat(server): extend scope challenges to all primitives

SamMorrowDrums
and
Copilot
committed
f0f73ee
test(conformance): add scope challenge fixture

SamMorrowDrums
and
Copilot
committed
0e5cbd8

Commits on Sep 1, 2026

fix(server): enforce OAuth challenge grammar

SamMorrowDrums
and
Copilot
committed
c51e262

Commits on Sep 2, 2026

refactor(server): derive scope-challenge resource_metadata from AuthInfo

claude
authored and
SamMorrowDrums
committed
6813ca8
fix(server): preserve resource metadata queries

SamMorrowDrums
and
Copilot
committed
54e8ded

Commits on Sep 3, 2026

Merge remote-tracking branch 'origin/main' into scope-challenge-server-sdk
SamMorrowDrums
committed
57c13c6
fix(server): use OAuth body for scope challenges

SamMorrowDrums
and
Copilot
committed
db2ca40

Commits on Sep 16, 2026

Merge branch 'main' into scope-challenge-server-sdk
pcarleton
authored
0d13551