pomerium/internal/mcp
Denis Mishin b944e68232
mcp: implement connect (#5640)
## Summary

adds implementation of `/.pomerium/mcp/connect` method, that takes a
`redirect_url` parameter and would ensure the user goes thru required
redirects so that its session is hydrated with the upstream Oauth token
for the MCP server.
the `redirect_url` parameter host must match one of the _client_ mcp
routes (currently identified by the presence of `mcp:
pass_upstream_access_token: true` in the route.

## Related issues

Fix
https://linear.app/pomerium/issue/ENG-2321/mcp-support-handling-external-oauth-servers

## User Explanation

<!-- How would you explain this change to the user? If this
change doesn't create any user-facing changes, you can leave
this blank. If filled out, add the `docs` label -->

## Checklist

- [x] reference any related issues
- [x] updated unit tests
- [ ] add appropriate label (`enhancement`, `bug`, `breaking`,
`dependencies`, `ci`)
- [x] ready for review
2025-06-02 17:19:34 -04:00
..
cipher.go mcp: authorize request (pt2) (#5586) 2025-04-24 12:11:19 -07:00
code.go mcp: extend code usage (#5588) 2025-04-25 14:47:11 -04:00
code_test.go mcp: extend code usage (#5588) 2025-04-25 14:47:11 -04:00
handler.go mcp: implement connect (#5640) 2025-06-02 17:19:34 -04:00
handler_authorization.go mcp: implement connect (#5640) 2025-06-02 17:19:34 -04:00
handler_connect.go mcp: implement connect (#5640) 2025-06-02 17:19:34 -04:00
handler_list_routes.go mcp: implement connect (#5640) 2025-06-02 17:19:34 -04:00
handler_metadata.go mcp: add oauth metadata endpoint (#5579) 2025-04-23 12:24:00 -04:00
handler_oauth_callback.go mcp: implement connect (#5640) 2025-06-02 17:19:34 -04:00
handler_register_client.go mcp: client registration: store to the databroker (#5584) 2025-04-24 14:54:31 -04:00
handler_token.go mcp: handle and pass upstream oauth2 tokens (#5595) 2025-05-01 12:42:31 -04:00
host_info.go mcp: implement connect (#5640) 2025-06-02 17:19:34 -04:00
host_info_test.go mcp: implement connect (#5640) 2025-06-02 17:19:34 -04:00
storage.go mcp: handle and pass upstream oauth2 tokens (#5595) 2025-05-01 12:42:31 -04:00
storage_test.go mcp: implement connect (#5640) 2025-06-02 17:19:34 -04:00
token.go mcp: implement connect (#5640) 2025-06-02 17:19:34 -04:00