viyatb-oai 2c2a42e65d Restrict MCP OAuth authorization endpoints to HTTP(S) (#47326) ...

## What changed

Reject authorization endpoints with schemes other than `http` or `https` before client registration or authorization URL return. Document this constraint for `mcpServer/oauth/login`.

## Testing

Make existing asynchronous tests wait for cleanup: wait for `ThreadIdle` before injecting user input in the guardian cached-score test, and poll for queue consumption before asserting that dispatched items are gone.

GitOrigin-RevId: e5f6b4c5556234c3cc2aa56910486e892c011116

2026-09-22 17:31:02 +00:00

..

src

Separate thread startup metadata from replay history (#46294)

2026-09-17 19:55:20 +00:00

tests

Restrict MCP OAuth authorization endpoints to HTTP(S) (#47326)

2026-09-22 17:31:02 +00:00

BUILD.bazel

Add durable user-message queue dispatch (#37204)

2026-08-06 03:11:42 +00:00

Cargo.toml

Add durable user-message queue dispatch (#37204)

2026-08-06 03:11:42 +00:00