Nick Steele c9b3924a62 Use the rmcp SDK for enterprise-managed token exchanges (#49473) ...

## What changed

Upgrade `rmcp` to a pinned Git revision of version `3.3.0` and enable `auth-enterprise-managed`. Delegate the two-stage ID-JAG exchange and token validation to the SDK, replacing the local implementation while retaining Codex HTTP routing and credential lifecycle policy.

Map SDK errors by exchange stage so `invalid_grant` distinguishes enterprise identity failures from resource authorization failures, and preserve handling of `insufficient_user_authentication`.

## Testing

Update exchange tests to verify rejection of unsupported `authorization_details` and malformed signed scopes. Exercise errors from both token endpoints to check credential policy, prevent credential reflection in diagnostics, and ensure rejected grants are not retried.

GitOrigin-RevId: a56034aa3fd70002754ea552fd2da70bdcd85b31

2026-09-30 03:33:43 +00:00

..

src

Use the rmcp SDK for enterprise-managed token exchanges (#49473)

2026-09-30 03:33:43 +00:00

tests

Add attributed MCP OAuth credential storage telemetry (#49392)

2026-09-29 23:01:46 +00:00

BUILD.bazel

[3/4] Add executor-backed RMCP HTTP client (#18583)

2026-04-22 17:38:04 -07:00

Cargo.toml

Use the rmcp SDK for enterprise-managed token exchanges (#49473)

2026-09-30 03:33:43 +00:00