stacklok / toolhive / 21969370176

62%

Build Type

push

github

Committed by web-flow

Commit Message

Add scope parameter to WWW-Authenticate header per RFC 6750 (#3795)

When scopes are explicitly configured, include them in the WWW-Authenticate header so MCP clients can use them directly (priority 1 in MCP Scope Selection Strategy) without falling back to Protected Resource Metadata discovery.

Only emitted when scopes are explicitly configured to avoid advertising scopes for external OIDC providers that may not support them.

Fixes: #3779

Run Details

4 of 4 new or added lines in 1 file covered. (100.0%)

35 existing lines in 4 files now uncovered.

44079 of 71162 relevant lines covered (61.94%)

74.97 hits per line