SEP-2352 follow-up: key credential/state stores per authorization server
@alexhancock 已经在做这个了。
开始于 2026年7月16日。
评估
这个 Issue 还没有评估数据。
描述
Follow-up to #879 / PR #965 (repurposed from a duplicate of #879).
PR #965 implements the SEP-2352 binding rule: stored credentials are stamped with the issuer that minted them, get_access_token() rejects issuer mismatches (AuthError::AuthorizationServerMismatch), and stale credentials are cleared on mismatch so the next flow re-registers with the new AS.
What it intentionally leaves out (from the PR's scope note): per-AS keying of custom credential/state stores. Today there is a single active credential set, so:
- Credentials for AS "A" are destroyed when the client talks to AS "B", even though the "A" credentials are still valid — switching back requires a full re-auth.
- A client connecting to multiple MCP servers backed by different authorization servers cannot hold credentials for both simultaneously.
Work: key stored credentials (and any registration state) by AS issuer so multiple credential sets can coexist, and select the right set based on the issuer of the currently discovered metadata.
Not required for 2026-07-28 conformance (the auth/authorization-server-migration scenario is covered by #965), so this is not on the 2026-07-28 milestone.
- 主要语言
- Rust
- 星标
- 3.9k
- 派生
- 645
- 平均合并
- 4 天 22 小时
- 30 天内合并 PR
- 37
贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
modelcontextprotocol/rust-sdk 的其他 Issue
-
streamable-http server: a supplied Mcp-Method contradicting an initialize body is silently accepted 未关闭bug P1 ready for work T-transport
难度 2/5 1-3 小时 新手友好度 76/100
modelcontextprotocol/rust-sdk#1271 ·
-
bug P2 ready for work T-model
难度 2/5 1-3 小时 新手友好度 78/100
modelcontextprotocol/rust-sdk#1242 ·
-
P3 question T-documentation T-enhancement
难度 1/5 1 小时以内 新手友好度 86/100
modelcontextprotocol/rust-sdk#1155 ·
-
bug P1 ready for work T-model T-service
难度 3/5 1-2 天 新手友好度 72/100
modelcontextprotocol/rust-sdk#1283 · 1 条评论 ·
-
bug P0 ready for work T-security T-transport
modelcontextprotocol/rust-sdk#1272 · 已指派 1 人 ·
查看 modelcontextprotocol/rust-sdk 的全部 Issue
相似的 Issue
-
bug github_actions
难度 2/5 1-3 小时 新手友好度 75/100
registrystack/registry-stack#1393 ·
-
难度 2/5 1-3 小时 新手友好度 75/100
longbridge/gpui-kit#3223 ·
-
bug engine
难度 2/5 1-3 小时 新手友好度 65/100
rocky-data/rocky#2181 ·
-
难度 2/5 1-3 小时 新手友好度 70/100
oasisprotocol/oasis-sdk#2523 ·
-
bot:ai-assisted component:indexer QA-roadmap status:untriaged
难度 2/5 1-3 小时 新手友好度 75/100
midnightntwrk/midnight-indexer#1557 ·