[client] Implement MCP OAuth scope selection and step-up authorization#1324

Merged

pcarleton merged 23 commits intomodelcontextprotocol:mainfrom

dogacancolak:dogacan/mcp-python-sdk/fix-oauth-scope-handling

Oct 13, 2025

Commits on Aug 29, 2025

test: add scope priority tests for OAuth flow
dogacancolak
committed
359e159
Copy full SHA for 359e159
functionality
dogacancolak
committed
8463dc7
Copy full SHA for 8463dc7
fix: prioritize PRM endpoint scopes over OAuth metadata scopes
dogacancolak
committed
09ef708
Copy full SHA for 09ef708
fixes
dogacancolak
committed
1517e4b
Copy full SHA for 1517e4b

Commits on Aug 30, 2025

reorg
dogacancolak
committed
3e4407d
Copy full SHA for 3e4407d
DRY tests
dogacancolak
committed
aedb751
Copy full SHA for aedb751
lint
dogacancolak
committed
9718486
Copy full SHA for 9718486

Commits on Oct 7, 2025

Merge branch 'modelcontextprotocol:main' into dogacan/mcp-python-sdk/fix-oauth-scope-handling
dogacancolak
authored
0708565
Copy full SHA for 0708565
Change to the updated MCP spec where priority order is 1. Client scope 2. WWW-auth scope 3. PRM scopes
dogacancolak
committed
cf4cc3f
Copy full SHA for cf4cc3f
Move logic from Auth Server Metadata handler to PRM handler
dogacancolak
committed
2736dfb
Copy full SHA for 2736dfb
comments
dogacancolak
committed
fbde0f5
Copy full SHA for fbde0f5
DRY up the www-authenticate header extraction
dogacancolak
committed
b0f0222
Copy full SHA for b0f0222
comment
dogacancolak
committed
643ae86
Copy full SHA for 643ae86
remove unused fixture
dogacancolak
committed
094c341
Copy full SHA for 094c341
fix test class name
dogacancolak
committed
32411ee
Copy full SHA for 32411ee
revert uv.lock changesd
dogacancolak
committed
7f39d90
Copy full SHA for 7f39d90
try again
dogacancolak
committed
c7bcfbc
Copy full SHA for c7bcfbc
once more
dogacancolak
committed
b0cf94c
Copy full SHA for b0cf94c
step-up auth flow and fix tests
dogacancolak
committed
5a311f7
Copy full SHA for 5a311f7
revert uv
dogacancolak
committed
2efec15
Copy full SHA for 2efec15
test step-up auth flow
dogacancolak
committed
95267ed
Copy full SHA for 95267ed

Commits on Oct 8, 2025

revert uv lock
dogacancolak
committed
ed443f5
Copy full SHA for ed443f5
function names
dogacancolak
committed
f84d1d2
Copy full SHA for f84d1d2