This commit is contained in:
Timothy Jaeryang Baek
2026-03-24 04:58:48 -05:00
parent 16ee4ac7a2
commit fe7e002fea

View File

@@ -266,11 +266,11 @@ async def get_authorization_server_discovery_urls(server_url: str) -> list[str]:
) as response:
if response.status == 401:
match = re.search(
r'resource_metadata="([^"]+)"',
r'resource_metadata=(?:"([^"]+)"|([^\s,]+))',
response.headers.get('WWW-Authenticate', ''),
)
if match:
resource_metadata_url = match.group(1)
resource_metadata_url = match.group(1) or match.group(2)
log.debug(f'Found resource_metadata URL: {resource_metadata_url}')
# Step 2: Fetch Protected Resource metadata