mirror of
https://github.com/pomerium/pomerium.git
synced 2025-07-23 03:29:51 +02:00
b944e68232
## Summary adds implementation of `/.pomerium/mcp/connect` method, that takes a `redirect_url` parameter and would ensure the user goes thru required redirects so that its session is hydrated with the upstream Oauth token for the MCP server. the `redirect_url` parameter host must match one of the _client_ mcp routes (currently identified by the presence of `mcp: pass_upstream_access_token: true` in the route. ## Related issues Fix https://linear.app/pomerium/issue/ENG-2321/mcp-support-handling-external-oauth-servers ## User Explanation <!-- How would you explain this change to the user? If this change doesn't create any user-facing changes, you can leave this blank. If filled out, add the `docs` label --> ## Checklist - [x] reference any related issues - [x] updated unit tests - [ ] add appropriate label (`enhancement`, `bug`, `breaking`, `dependencies`, `ci`) - [x] ready for review |
||
|---|---|---|
| .. | ||
| envoyconfig | ||
| otelconfig | ||
| testdata | ||
| autocert.go | ||
| autocert_test.go | ||
| bearer_token_format.go | ||
| codec_type.go | ||
| codec_type_test.go | ||
| config.go | ||
| config_source.go | ||
| config_source_test.go | ||
| config_test.go | ||
| constants.go | ||
| custom.go | ||
| custom_test.go | ||
| doc.go | ||
| from.go | ||
| from_test.go | ||
| helpers.go | ||
| helpers_test.go | ||
| http.go | ||
| http_test.go | ||
| identity.go | ||
| layered.go | ||
| layered_test.go | ||
| log.go | ||
| log_level.go | ||
| metrics.go | ||
| metrics_test.go | ||
| mtls.go | ||
| mtls_test.go | ||
| options.go | ||
| options_check.go | ||
| options_test.go | ||
| policy.go | ||
| policy_ppl.go | ||
| policy_ppl_test.go | ||
| policy_test.go | ||
| runtime_flags.go | ||
| session.go | ||
| session_test.go | ||
| validate.go | ||