pomerium/internal
Denis Mishin 8a89c975d9
mcp: delete upstream oauth2 token (#5707)
## Summary

Adds `POST /.pomerium/mcp/routes/disconnect` that allows an MCP client
application to request upstream OAuth2 tokens to be purged, so that a
user may get a new ones with possibly different scopes.

## Related issues

Fix
https://linear.app/pomerium/issue/ENG-2545/mcp-user-should-be-able-to-purge-their-upstream-oauth2-token

## User Explanation

<!-- How would you explain this change to the user? If this
change doesn't create any user-facing changes, you can leave
this blank. If filled out, add the `docs` label -->

## Checklist

- [x] reference any related issues
- [x] updated unit tests
- [x] add appropriate label (`enhancement`, `bug`, `breaking`,
`dependencies`, `ci`)
- [x] ready for review
2025-07-08 12:46:45 -04:00
..
atomicutil upgrade to go v1.24 (#5562) 2025-04-02 15:53:09 -06:00
authenticateflow ssh: implement authorization policy evaluation (#5665) 2025-07-01 12:04:00 -07:00
autocert chore(deps): bump the go group with 24 updates (#5638) 2025-06-17 09:36:50 -07:00
benchmarks upgrade to go v1.24 (#5562) 2025-04-02 15:53:09 -06:00
chanutil
contextkeys
controlplane chore(deps): bump the go group with 24 updates (#5638) 2025-06-17 09:36:50 -07:00
databroker chore(deps): bump the go group with 24 updates (#5638) 2025-06-17 09:36:50 -07:00
deterministicecdsa
enabler chore(deps): bump the go group with 24 updates (#5638) 2025-06-17 09:36:50 -07:00
encoding
errgrouputil
events chore(deps): bump the go group with 24 updates (#5638) 2025-06-17 09:36:50 -07:00
fileutil remove debug log message for directories (#5560) 2025-04-02 10:17:42 -06:00
handlers
hashutil
headertemplate add support for pomerium.request.headers for set_request_headers (#5563) 2025-04-07 10:32:03 -06:00
httputil chore(deps): bump the go group with 24 updates (#5638) 2025-06-17 09:36:50 -07:00
jsonrpc mcp: respond with jsonrpc error when MCP request is denied (#5694) 2025-07-08 09:07:26 -06:00
jwtutil
log authorize: add request body logging (#5696) 2025-07-07 12:12:29 -04:00
mcp mcp: delete upstream oauth2 token (#5707) 2025-07-08 12:46:45 -04:00
middleware
oauth21 mcp: client registration/token fixes (#5649) 2025-06-11 11:28:24 -04:00
registry upgrade to go v1.24 (#5562) 2025-04-02 15:53:09 -06:00
retry chore(deps): bump the go group with 24 updates (#5638) 2025-06-17 09:36:50 -07:00
rfc7591 mcp: client registration/token fixes (#5649) 2025-06-11 11:28:24 -04:00
scheduler
sessions chore(deps): bump the go group with 24 updates (#5638) 2025-06-17 09:36:50 -07:00
sets
signal
syncutil
telemetry chore(deps): bump the go group with 24 updates (#5638) 2025-06-17 09:36:50 -07:00
testenv ssh: add runtime flag for jump host mode (#5699) 2025-07-07 12:29:05 -04:00
tests/xdserr
testutil ssh: implement authorization policy evaluation (#5665) 2025-07-01 12:04:00 -07:00
tripper
urlutil multi-domain login redirects (#5564) 2025-04-04 13:14:30 -07:00
version
zero chore(deps): bump the go group with 24 updates (#5638) 2025-06-17 09:36:50 -07:00