Ch"SSKJrJr SSKJr SSKJr SSKJr SSK J r SSK J r SSK Jr SSKJrJr SS KJr SS KJr SS KJr SS KJr SS KJr SSKJr SSKJr SSK J!r! SSK"J#r#J$r$ SSK%J&r& SSK'J(r( S\4Sjr)Sr*Sr+Sr,Sr-S\\ /\\\-4S\.\/S\4Sjr0S.S\!\\\4S \S!\S-S"\#S-S#\$S-S\.\4 S$jjr1S \S!\S-S"\#S#\$S\(4 S%jr2S&\S\4S'jr3S.S(\S)\.\S*\.\/S-S+\/S-S,\S-S\.\4 S-jjr4g)/) AwaitableCallable)Any)urlparse) AnyHttpUrl)CORSMiddleware)Request)Response)Routerequest_response)ASGIApp)AuthorizationHandler)MetadataHandler)RegistrationHandler)RevocationHandler) TokenHandler)ClientAuthenticator) OAuthAuthorizationServerProvider)ClientRegistrationOptionsRevocationOptions)MCP_PROTOCOL_VERSION_HEADER) OAuthMetadataurlc$URS:waHURS:wa8URb+URRS5(d [S5eUR(a [S5eUR (a [S5eg)z Validate that the issuer URL meets OAuth 2.0 requirements. Args: url: The issuer URL to validate Raises: ValueError: If the issuer URL is invalid https localhostNz 127.0.0.1zIssuer URL must be HTTPSz#Issuer URL must not have a fragmentz'Issuer URL must not have a query string)schemehost startswith ValueErrorfragmentquery)rs P/home/james-whalen/.local/lib/python3.13/site-packages/mcp/server/auth/routes.pyvalidate_issuer_urlr$ss g HH # XX !#((*=*=k*J*J344 ||>?? yyBCCz /authorizez/tokenz /registerz/revokehandler allow_methodsreturnc:[[U5SU[/S9nU$)N*)app allow_originsr' allow_headers)rr r)r&r'cors_apps r#cors_middlewarer/8s) W %#23 H Or%Nprovider issuer_urlservice_documentation_urlclient_registration_optionsrevocation_optionsc [U5 U=(d [5nU=(d [5n[UUUU5n[ U5n[ S[ [U5RSS/5SS/S9[ [[U5RSS/S9[ [[ [X5RSS/5SS/S9/nUR(a@[UUS9nUR[ [ [ URSS/5SS/S95 UR(aA[#X5n UR[ [$[ U RSS/5SS/S95 U$)Nz'/.well-known/oauth-authorization-serverGETOPTIONSendpointmethodsPOST)options)r$rrbuild_metadatarr r/rhandleAUTHORIZATION_PATHr TOKEN_PATHrenabledrappendREGISTRATION_PATHrREVOCATION_PATH) r0r1r2r3r4metadataclient_authenticatorroutesregistration_handlerrevocation_handlers r#create_auth_routesrJEs #"="\AZA\+B/@/B!# H /x8  5$)00 "I&    *(3::FO    $X<CC#Y'  !F4#**2 /   !((//Y' +   !!.xN (&--Y' +    Mr%c [[U5RS5[-5n[[U5RS5[-5n[ UUUUR S/SSS/S/SUSSSSS/S9nUR(a/[[U5RS5[-5Ul UR(a7[[U5RS5[-5Ul S/Ul U$)N/codeauthorization_code refresh_tokenclient_secret_postS256)issuerauthorization_endpointtoken_endpointscopes_supportedresponse_types_supportedresponse_modes_supportedgrant_types_supported%token_endpoint_auth_methods_supported0token_endpoint_auth_signing_alg_values_supportedservice_documentationui_locales_supported op_policy_uri op_tos_uriintrospection_endpoint code_challenge_methods_supported) rstrrstripr?r@r valid_scopesrArCregistration_endpointrDrevocation_endpoint*revocation_endpoint_auth_methods_supported)r1r2r3r4authorization_url token_urlrEs r#r=r=s #3z?#9#9##>AS#ST3z?11#6CDI0 4AA"(!%3_E/C.D9=7!#*0H&#**)3C O4J4J34ORc4c)d&!!'1#j/2H2H2MP_2_'`$?S>T; Or%resource_server_urlc[[U55nURS:wa UROSn[URSUR SU35$)ue Build RFC 9728 compliant protected resource metadata URL. Inserts /.well-known/oauth-protected-resource between host and resource path as specified in RFC 9728 §3.1. Args: resource_server_url: The resource server URL (e.g., https://example.com/mcp) Returns: The metadata URL (e.g., https://example.com/.well-known/oauth-protected-resource/mcp) rLz://z%/.well-known/oauth-protected-resource)rrapathrrnetloc)riparsed resource_paths r#build_resource_metadata_urlrpsQc-. /F#);;##5FKK2M s6==/9^_l^mn oor% resource_urlauthorization_serversrU resource_nameresource_documentationcSSKJn SSKJn U"UUUUUS9nU"U5n[ U5n [ [ U 55n U Rn [U [URSS/5SS/S9/$)a] Create routes for OAuth 2.0 Protected Resource Metadata (RFC 9728). Args: resource_url: The URL of this resource server authorization_servers: List of authorization servers that can issue tokens scopes_supported: Optional list of scopes supported by this resource Returns: List of Starlette routes for protected resource metadata r) ProtectedResourceMetadataHandler)ProtectedResourceMetadata)resourcerrrUrsrtr6r7r8) !mcp.server.auth.handlers.metadatarvmcp.shared.authrwrprrarlr r/r>) rqrrrUrsrtrvrwrEr& metadata_urlrnwell_known_paths r# create_protected_resource_routesr}s$S9(3)#5 H/x8G/|rs/!4&(5#C=A=7FEQB)DZD4"    wiIh,?!?? @ 9    48DH37 N.sC}=NN *D0N";T!A N *D0 N  %[ Nb%%)D0%";%* %  %PpZpJp,*. $04 ,, +,3i$&,: , '- ,  %[ ,r%