pomerium/internal/mcp
Denis Mishin 8a89c975d9
mcp: delete upstream oauth2 token (#5707)
## Summary

Adds `POST /.pomerium/mcp/routes/disconnect` that allows an MCP client
application to request upstream OAuth2 tokens to be purged, so that a
user may get a new ones with possibly different scopes.

## Related issues

Fix
https://linear.app/pomerium/issue/ENG-2545/mcp-user-should-be-able-to-purge-their-upstream-oauth2-token

## User Explanation

<!-- How would you explain this change to the user? If this
change doesn't create any user-facing changes, you can leave
this blank. If filled out, add the `docs` label -->

## Checklist

- [x] reference any related issues
- [x] updated unit tests
- [x] add appropriate label (`enhancement`, `bug`, `breaking`,
`dependencies`, `ci`)
- [x] ready for review
2025-07-08 12:46:45 -04:00
..
cipher.go mcp: authorize request (pt2) (#5586) 2025-04-24 12:11:19 -07:00
code.go mcp: extend code usage (#5588) 2025-04-25 14:47:11 -04:00
code_test.go mcp: extend code usage (#5588) 2025-04-25 14:47:11 -04:00
handler.go mcp: delete upstream oauth2 token (#5707) 2025-07-08 12:46:45 -04:00
handler_authorization.go mcp: client registration/token fixes (#5649) 2025-06-11 11:28:24 -04:00
handler_connect.go mcp: delete upstream oauth2 token (#5707) 2025-07-08 12:46:45 -04:00
handler_list_routes.go mcp: delete upstream oauth2 token (#5707) 2025-07-08 12:46:45 -04:00
handler_metadata.go mcp: client registration/token fixes (#5649) 2025-06-11 11:28:24 -04:00
handler_oauth_callback.go mcp: implement connect (#5640) 2025-06-02 17:19:34 -04:00
handler_register_client.go mcp: client registration/token fixes (#5649) 2025-06-11 11:28:24 -04:00
handler_token.go mcp: client registration/token fixes (#5649) 2025-06-11 11:28:24 -04:00
host_info.go mcp: split mcp into server and client for better option grouping (#5666) 2025-06-24 10:21:32 -07:00
host_info_test.go mcp: split mcp into server and client for better option grouping (#5666) 2025-06-24 10:21:32 -07:00
storage.go mcp: delete upstream oauth2 token (#5707) 2025-07-08 12:46:45 -04:00
storage_test.go mcp: delete upstream oauth2 token (#5707) 2025-07-08 12:46:45 -04:00
token.go mcp: implement connect (#5640) 2025-06-02 17:19:34 -04:00