go-sdk icon indicating copy to clipboard operation
go-sdk copied to clipboard

clients should check PKCE support

Open jba opened this issue 4 months ago • 2 comments

The client auth implementation for clients should check that the auth server implements PKCE, as described in https://github.com/modelcontextprotocol/modelcontextprotocol/blob/main/docs/specification/draft/basic/authorization.mdx?plain=1#L350-L356.

jba avatar Sep 16 '25 19:09 jba

Hi @jba, allow me to double confirming

  1. In auth_meta.go, Use GetAuthServerMeta and check using CodeChallengeMethodsSupported
  2. provide example in client_example_test.go

let me know if i missed something. if already no issue, can assign this task to me? willing to raise the PR

RyoKusnadi avatar Oct 01 '25 15:10 RyoKusnadi

Yes, CodeChallengeMethodsSupported must be a non-empty slice.

jba avatar Oct 06 '25 16:10 jba