Last 12 weeks · 50 commits
5 of 6 standards met
Motivation and Context Described in #169 How Has This Been Tested? npm test (Test Files 6 passed, Tests 85 passed) npm test -- src/scenarios/authorization-server/authorization-server-metadata.test.ts (Test Files 1 passed, Tests 1 passed) npm run start -- authorization --url http://localhost:8080/.well-known/oauth-authorization-server/realms/mp url URL of the authorization server metadata endpoint npm run start -- authorization --url http://localhost:8080/.well-known/oauth-authorization-server/realms/invalid url invalid URL npm run start -- list Breaking Changes add authorization server mode (-- authorization) add url option for authorization server mode (--url ) add a conformance test for authorization server metadata Types of changes [x] New feature (non-breaking change which adds functionality) Checklist [x] I have read the MCP Documentation [x] My code follows the repository's style guidelines [x] New and existing tests pass locally [x] I have added appropriate error handling [x] I have added or updated documentation as needed
Describe the bug I'm currently working on implementing client-side OAuth in Go SDK and I'm running into a conformance test failure which I'm not sure is warranted, so I would like to consult. The issue is related to Authorization Server Metadata handling. In and tests, the authorization server's issuer identifier contains a non-empty path component . According to RFC 8141 section 3.3 a client must validate if the issuer value returned by the authorization server is the same as the identifier used to create the URL for the metadata. However, the AS returns a value with no path component, for example: Should this behavior be adjusted? To Reproduce Steps to reproduce the behavior: 1. Run or conformance test with a working SDK and inspect . Expected behavior** I would expect the issuer field to contain the path component used to construct the AS metadata URL.
Repository: modelcontextprotocol/conformance. Description: Conformance Tests for MCP Stars: 42, Forks: 26. Primary language: TypeScript. Languages: TypeScript (96.1%), JavaScript (3.9%). Latest release: v0.1.15 (1w ago). Open PRs: 22, open issues: 12. Last activity: 6d ago. Community health: 87%. Top contributors: pcarleton, felixweinberger, dependabot[bot], maxisbey, mikekistler, mattzcarey, nbarbettini, olaservo, ihrpr, sagar-okta and others.
Background This repository contains conformance tests for MCP clients and MCP servers. However, there are currently no conformance tests for authorization servers. It may be because conformance tests for authorization servers may have low priority, but they are necessary. First Step Implementing conformance tests for authorization servers involves multiple steps. Therefore, as a first step, this issue focuses on implementing a test for OAuth 2.0 Authorization Server Metadata RFC8414.
Motivation and Context Two issues prevented client conformance tests from running on Windows: 1. Single-quote quoting in execSync: The --command argument was wrapped in single quotes, which cmd.exe treats as literal characters rather than string delimiters. This caused the CLI to receive only the first word of the command. Switched to execFileSync with an args array to bypass shell quoting entirely. 2. Backslash path separators in parseOutputDir: dirname() on Windows returns auth\scenario-name but reconcileWithExpected compares against auth/scenario-name, causing auth scenarios to be double-counted. Normalize backslashes to forward slashes in parsed scenario names. How Has This Been Tested? Re-running the assessment with these changes staged locally. Breaking Changes No Types of changes [x] Bug fix (non-breaking change which fixes an issue) [ ] New feature (non-breaking change which adds functionality) [ ] Breaking change (fix or feature that would cause existing functionality to change) [ ] Documentation update Checklist [x] I have read the MCP Documentation [x] My code follows the repository's style guidelines [x] New and existing tests pass locally [x] I have added appropriate error handling [x] I have added or updated documentation as needed Additional context Encountered when running the assessment for the C# SDK.