feat: Add server auth conformance tests - #105

Closed

pcarleton wants to merge 12 commits into

mainfrom

server-auth-conformance

Commits on Jan 14, 2026

wip server auth conformance first cut
pcarleton
committed
d7f09b6
fix: auth-test-server outputs full /mcp endpoint URL
pcarleton
committed
704b4a0
refactor: use SDK requireBearerAuth with token introspection
pcarleton
committed
390e054
feat: default to CIMD for fake AS, support both CIMD and DCR in tests
pcarleton
committed
deda2e5
chore: remove auth-test-server (moved to typescript-sdk)
pcarleton
committed
6433ce1
fix: update spec references to 2025-11-25 and simplify fake-auth-server
pcarleton
committed
55a09ad
refactor: use --url and --command for auth tests instead of separate flags
pcarleton
committed
cf05bd6
feat: add --interactive flag for browser-based OAuth flows
pcarleton
committed
00bb580
refactor: simplify callback URL handling
pcarleton
committed
f1e255a
fix: add FAILURE checks for missing phases and expand AS metadata validation
pcarleton
committed
ac583cc
fix: use Omit for clientMetadata type since redirect_uris is added in getter
pcarleton
committed
345bf53
fix: use text/plain for callback responses to prevent XSS
pcarleton
committed
c34a019