jlxq0/typst-mcp
1
0
Fork 0
Code Issues 13 Pull requests Projects Releases Packages 1 Wiki Activity Actions

feat(auth): RFC 8414 + DCR shim in front of Entra #1

Closed
jlxq0 wants to merge 1 commit from feat/dcr-shim into main
pull from: feat/dcr-shim
merge into: jlxq0:main
Conversation 0 Commits 1 Files changed 11 +771 -28
jlxq0 commented 2026-08-17 04:21:21 +00:00
Owner
Copy link

Summary

  • Serve unauthenticated AS metadata and POST /register so Claude Connect can DCR.
  • PRM authorization_servers is this origin; authorize/token proxy Entra. Custom schemes stay first-class; do not register them on Entra.
  • After merge: add OIDC_CLIENT_ID (public client) to the 1P item and ExternalSecret. Do not invent a GUID.

Test plan

  • cargo test oauth_redirect, entra_oauth_urls, http DCR, PRM metadata
  • live GET /.well-known/oauth-authorization-server is 200 with registration_endpoint
  • live POST /register 201 without a bearer
## Summary - Serve unauthenticated AS metadata and POST /register so Claude Connect can DCR. - PRM authorization_servers is this origin; authorize/token proxy Entra. Custom schemes stay first-class; do not register them on Entra. - After merge: add OIDC_CLIENT_ID (public client) to the 1P item and ExternalSecret. Do not invent a GUID. ## Test plan - [x] cargo test oauth_redirect, entra_oauth_urls, http DCR, PRM metadata - [ ] live GET /.well-known/oauth-authorization-server is 200 with registration_endpoint - [ ] live POST /register 201 without a bearer
feat(auth): front Entra with RFC 8414 and a DCR shim
Some checks failed
CI / cargo (pull_request) Failing after 15s
Details
CI / docker (pull_request) Has been skipped
Details
77879c4cf3
 
Claude Connect needs an unauthenticated registration_endpoint. Point
protected-resource metadata at this origin and serve /register plus a
same-origin authorize/token proxy so custom-scheme clients can complete
OAuth without registering cursor:// on Entra.
jlxq0 closed this pull request 2026-08-23 01:07:22 +00:00
Some checks failed
CI / cargo (pull_request) Failing after 15s
Required
Details
CI / docker (pull_request) Has been skipped
Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
deferred
No brief and no decision. Not scheduled. Needs an explicit go before any work.

  
waiting-on-julian
Blocked on Julian. The ask is in the issue.

No labels
deferred
waiting-on-julian
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
jlxq0/typst-mcp!1
No description provided.