Nick Steele f6805328c4
Add enterprise ID-JAG exchange for MCP OAuth ( #40722 ) ...
## What changed
- Add a non-interactive two-step exchange that obtains an ID-JAG from an
enterprise identity provider and trades it for a resource-bound MCP bearer
token.
- Validate trusted endpoint URLs, request inputs, ID-JAG claims, resource and
scope bindings, and token responses before credentials are forwarded or a
bearer token is returned.
- Expose structured authentication failures while redacting credentials and
provider-controlled error details from diagnostics.
## Testing
- Cover successful exchanges, signed scope narrowing, invalid claims and token
responses, request validation, and error redaction.
GitOrigin-RevId: d716e0e1c2dc6b230cecbc0e9cc09afeee81d599
2026-08-25 22:12:41 +00:00
2026-08-24 22:40:35 +00:00
2026-08-25 21:38:10 +00:00
2026-08-25 22:01:26 +00:00
2026-08-18 23:05:52 +00:00
2026-08-25 21:38:10 +00:00
2026-08-25 03:08:33 +00:00
2026-08-24 21:39:48 +00:00
2026-08-20 08:10:08 +00:00
2026-08-25 07:37:42 +00:00
2026-08-24 21:39:48 +00:00
2026-08-20 19:28:32 +00:00
2026-08-14 05:03:39 +00:00
2026-08-17 22:37:14 +00:00
2026-08-25 20:37:15 +00:00
2026-08-25 16:38:46 +00:00
2026-08-25 21:34:05 +00:00
2026-08-25 20:37:15 +00:00
2026-08-25 20:37:15 +00:00
2026-08-25 20:37:15 +00:00
2026-08-21 16:50:34 +00:00
2026-08-25 21:38:10 +00:00
2026-08-18 23:47:00 +00:00
2026-08-13 23:13:37 +00:00
2026-08-25 21:20:51 +00:00
2026-08-25 20:26:23 +00:00
2026-08-25 20:26:23 +00:00
2026-08-23 18:53:15 +00:00
2026-08-25 21:49:59 +00:00
2026-08-25 21:20:51 +00:00
2026-08-25 20:26:23 +00:00
2026-08-25 19:54:52 +00:00
2026-08-25 21:49:59 +00:00
2026-08-25 18:04:01 +00:00
2026-08-17 04:37:50 +00:00
2026-08-25 21:38:10 +00:00
2026-08-25 17:13:50 +00:00
2026-08-25 19:30:21 +00:00
2026-08-18 21:46:18 +00:00
2026-08-25 18:04:01 +00:00
2026-08-25 21:34:05 +00:00
2026-08-25 01:03:20 +00:00
2026-08-25 10:29:26 +00:00
2026-08-17 00:09:44 +00:00
2026-08-24 00:52:52 +00:00
2026-08-25 21:08:22 +00:00
2026-08-25 03:08:33 +00:00
2026-08-25 10:29:26 +00:00
2026-08-24 21:39:48 +00:00
2026-08-21 19:04:32 +00:00
2026-08-24 21:39:48 +00:00
2026-08-25 18:41:03 +00:00
2026-08-25 17:59:32 +00:00
2026-08-21 21:01:59 +00:00
2026-08-25 15:50:19 +00:00
2026-08-25 21:34:05 +00:00
2026-08-15 01:34:33 +00:00
2026-08-21 16:45:05 +00:00
2026-08-25 22:12:41 +00:00
2026-08-25 21:34:05 +00:00
2026-08-24 17:07:21 +00:00
2026-08-25 05:16:45 +00:00
2026-08-20 17:39:06 +00:00
2026-08-20 06:10:03 +00:00
2026-08-25 21:34:05 +00:00
2026-08-20 18:29:35 +00:00
2026-08-25 21:38:10 +00:00
2026-08-25 22:01:26 +00:00
2026-08-25 22:05:48 +00:00
2026-08-24 19:25:32 +00:00
2026-08-20 14:55:08 +00:00
2026-08-25 18:41:03 +00:00
2026-08-15 14:31:04 +00:00
2026-08-25 21:44:43 +00:00
2026-08-25 21:44:43 +00:00
2026-08-25 21:34:05 +00:00
2026-08-18 22:00:25 +00:00
f6805328c4