oauth

Apr 3, 2026

Changes in this version

+ func ValidateIssuerURL(issuer string) error

+ func ValidateRedirectURI(redirectURI string) error

Feb 10, 2026

Changes in this version

type Config

+ AllowedClientRedirectDomains string

type ConfigBuilder

+ func (b *ConfigBuilder) WithAllowedClientRedirectDomains(domains string) *ConfigBuilder

type OAuth2Config

+ AllowedClientRedirectDomains string

Jan 16, 2026

Changes in this version

type Config

+ FixedRedirectURI string

type ConfigBuilder

+ func (b *ConfigBuilder) WithFixedRedirectURI(uri string) *ConfigBuilder

type OAuth2Config

+ FixedRedirectURI string

Dec 21, 2025

Changes in this version

type Config

+ Scopes []string

+ SkipAudienceCheck bool

+ ValidatorIssuer string

type ConfigBuilder

+ func (b *ConfigBuilder) WithScopes(scopes []string) *ConfigBuilder

+ func (b *ConfigBuilder) WithSkipAudienceCheck(skipAudienceCheck bool) *ConfigBuilder

+ func (b *ConfigBuilder) WithValidatorIssuer(validatorIssuer string) *ConfigBuilder

type OAuth2Config

+ Scopes []string

Nov 4, 2025

Changes in this version

type Server

+ func (s *Server) Return401(w http.ResponseWriter)

+ func (s *Server) Return401InvalidToken(w http.ResponseWriter)

+ func (s *Server) WrapMCPEndpoint(handler http.Handler) http.HandlerFunc

Oct 23, 2025

Changes in this version

+ func WithUser(ctx context.Context, user *User) context.Context

type Server

+ func (s *Server) ValidateTokenCached(ctx context.Context, token string) (*User, error)

Oct 20, 2025

Changes in this version

+ func AutoDetectServerURL(host, port string, useTLS bool) string

type Config

+ func FromEnv() (*Config, error)

+ type ConfigBuilder struct

+ func NewConfigBuilder() *ConfigBuilder

+ func (b *ConfigBuilder) Build() (*Config, error)

+ func (b *ConfigBuilder) WithAudience(audience string) *ConfigBuilder

+ func (b *ConfigBuilder) WithClientID(clientID string) *ConfigBuilder

+ func (b *ConfigBuilder) WithClientSecret(secret string) *ConfigBuilder

+ func (b *ConfigBuilder) WithHost(host string) *ConfigBuilder

+ func (b *ConfigBuilder) WithIssuer(issuer string) *ConfigBuilder

+ func (b *ConfigBuilder) WithJWTSecret(secret []byte) *ConfigBuilder

+ func (b *ConfigBuilder) WithLogger(logger Logger) *ConfigBuilder

+ func (b *ConfigBuilder) WithMode(mode string) *ConfigBuilder

+ func (b *ConfigBuilder) WithPort(port string) *ConfigBuilder

+ func (b *ConfigBuilder) WithProvider(provider string) *ConfigBuilder

+ func (b *ConfigBuilder) WithRedirectURIs(uris string) *ConfigBuilder

+ func (b *ConfigBuilder) WithServerURL(url string) *ConfigBuilder

+ func (b *ConfigBuilder) WithTLS(useTLS bool) *ConfigBuilder

+ type Endpoint struct

+ Description string

+ Path string

type Server

+ func (s *Server) GetAllEndpoints() []Endpoint

+ func (s *Server) GetAuthorizationServerMetadataURL() string

+ func (s *Server) GetAuthorizeURL() string

+ func (s *Server) GetCallbackURL() string

+ func (s *Server) GetHTTPServerOptions() []mcpserver.StreamableHTTPOption

+ func (s *Server) GetOIDCDiscoveryURL() string

+ func (s *Server) GetProtectedResourceMetadataURL() string

+ func (s *Server) GetRegisterURL() string

+ func (s *Server) GetStatusString(useTLS bool) string

+ func (s *Server) GetTokenURL() string

+ func (s *Server) LogStartup(useTLS bool)

+ func (s *Server) WrapHandler(next http.Handler) http.Handler

+ func (s *Server) WrapHandlerFunc(next http.HandlerFunc) http.HandlerFunc

Oct 19, 2025

Changes in this version

+ func CreateHTTPContextFunc() func(context.Context, *http.Request) context.Context

+ func CreateRequestAuthHook(validator provider.TokenValidator) func(context.Context, interface{}, interface{}) error

+ func GetOAuthToken(ctx context.Context) (string, bool)

+ func OAuthMiddleware(validator provider.TokenValidator, enabled bool) func(server.ToolHandlerFunc) server.ToolHandlerFunc

+ func SetupOAuth(cfg *Config) (provider.TokenValidator, error)

+ func WithOAuth(mux *http.ServeMux, cfg *Config) (mcpserver.ServerOption, error)

+ func WithOAuthToken(ctx context.Context, token string) context.Context

+ type CachedToken struct

+ ExpiresAt time.Time

+ User *User

+ type Config struct

+ Audience string

+ ClientID string

+ ClientSecret string

+ Issuer string

+ JWTSecret []byte

+ Logger Logger

+ Mode string

+ Provider string

+ RedirectURIs string

+ ServerURL string

+ func (c *Config) Validate() error

+ type Logger interface

+ Debug func(msg string, args ...interface{})

+ Error func(msg string, args ...interface{})

+ Info func(msg string, args ...interface{})

+ Warn func(msg string, args ...interface{})

+ type OAuth2Config struct

+ Audience string

+ ClientID string

+ ClientSecret string

+ Enabled bool

+ Issuer string

+ MCPHost string

+ MCPPort string

+ MCPURL string

+ Mode string

+ Provider string

+ RedirectURIs string

+ Scheme string

+ Version string

+ func NewOAuth2ConfigFromConfig(cfg *Config, version string) *OAuth2Config

+ type OAuth2Handler struct

+ func CreateOAuth2Handler(cfg *Config, version string, logger Logger) *OAuth2Handler

+ func NewOAuth2Handler(cfg *OAuth2Config, logger Logger) *OAuth2Handler

+ func (h *OAuth2Handler) GetAuthorizationServerMetadata() map[string]interface{}

+ func (h *OAuth2Handler) GetConfig() *OAuth2Config

+ func (h *OAuth2Handler) HandleAuthorizationServerMetadata(w http.ResponseWriter, r *http.Request)

+ func (h *OAuth2Handler) HandleAuthorize(w http.ResponseWriter, r *http.Request)

+ func (h *OAuth2Handler) HandleCallback(w http.ResponseWriter, r *http.Request)

+ func (h *OAuth2Handler) HandleCallbackRedirect(w http.ResponseWriter, r *http.Request)

+ func (h *OAuth2Handler) HandleJWKS(w http.ResponseWriter, r *http.Request)

+ func (h *OAuth2Handler) HandleMetadata(w http.ResponseWriter, r *http.Request)

+ func (h *OAuth2Handler) HandleOIDCDiscovery(w http.ResponseWriter, r *http.Request)

+ func (h *OAuth2Handler) HandleProtectedResourceMetadata(w http.ResponseWriter, r *http.Request)

+ func (h *OAuth2Handler) HandleRegister(w http.ResponseWriter, r *http.Request)

+ func (h *OAuth2Handler) HandleToken(w http.ResponseWriter, r *http.Request)

+ type Server struct

+ func NewServer(cfg *Config) (*Server, error)

+ func (s *Server) Middleware() func(server.ToolHandlerFunc) server.ToolHandlerFunc

+ func (s *Server) RegisterHandlers(mux *http.ServeMux)

+ type TokenCache struct

+ type User = provider.User

+ func GetUserFromContext(ctx context.Context) (*User, bool)