chore(oauth2): Implement Protected Resource protocol#133

Open

timothedelion wants to merge 7 commits intomainfrom

tdelion/APPAI-524/protected-resource-metadata

Commits on Apr 30, 2026

chore(oauth2): Claim Protected Resource protocol and proxy some path to overcome this issue on Claude Web side : https://github.com/anthropics/claude-ai-mcp/issues/82
timothedelion
committed
feat(oauth2): advertise AS metadata via WWW-Authenticate on 401
timothedelion
committed
feat(oauth2): pass through DCR client_id in proxy authorize/token
timothedelion
committed
fix(http): pass auth provider to create_streamable_http_app
timothedelion
committed
feat(oauth2): advertise the MCP server's actual scope set in metadata
timothedelion
committed
chore(oauth2): hoist get_scopes_from_env_var import to module level
timothedelion
committed

Commits on May 2, 2026

feat(oauth2): advertise the full GG scope set for DCR clients
timothedelion
committed