fix(mcp): return origin url as authorization server (#6397)

This commit is contained in:
Joél Solano
2025-11-29 03:45:33 +01:00
committed by GitHub
parent 9abd846d20
commit 86c8d54f47
2 changed files with 6 additions and 4 deletions

View File

@@ -93,10 +93,11 @@ export const getMCPProtectedResourceMetadata = (
options?: MCPOptions | undefined,
) => {
const baseURL = ctx.context.baseURL;
const origin = new URL(baseURL).origin;
return {
resource: options?.resource ?? new URL(baseURL).origin,
authorization_servers: [baseURL],
resource: options?.resource ?? origin,
authorization_servers: [origin],
jwks_uri: options?.oidcConfig?.metadata?.jwks_uri ?? `${baseURL}/mcp/jwks`,
scopes_supported: options?.oidcConfig?.metadata?.scopes_supported ?? [
"openid",

View File

@@ -368,10 +368,11 @@ describe("mcp", async () => {
const metadata = await serverClient.$fetch(
"/.well-known/oauth-protected-resource",
);
const origin = new URL(baseURL).origin;
expect(metadata.data).toMatchObject({
resource: baseURL,
authorization_servers: [`${baseURL}/api/auth`],
resource: origin,
authorization_servers: [origin],
jwks_uri: `${baseURL}/api/auth/mcp/jwks`,
scopes_supported: ["openid", "profile", "email", "offline_access"],
bearer_methods_supported: ["header"],