pomerium / pomerium / 23255932940

52%

Build Type

push

github

Committed by web-flow

Commit Message

mcp: proto/config foundation for upstream OAuth unification (#6194)

## Summary

Foundation PR for ENG-3698 (MCP upstream OAuth unification).

- `UpstreamOAuth2` config gets `authorization_url_params
map<string,string>` — lets admins pass extra query parameters to the
upstream authorization endpoint without a code change (e.g. `audience`,
`access_type`, custom params)
- `UpstreamMCPToken` field 11: rename `audience` → `client_id` to
accurately reflect what the field stores (the OAuth `client_id` used
when the token was acquired). Same field number.

## Related issues

- ENG-3698

## User Explanation

No user-facing behavior changes. Config schema addition:
`upstream_oauth2` blocks may now include `authorization_url_params` to
pass extra query string parameters to the upstream authorization
endpoint.

## Checklist

- [x] reference any related issues
- [x] updated unit tests
- [ ] add appropriate label (`enhancement`, `bug`, `breaking`,
`dependencies`, `ci`)
- [ ] ready for review

Coverage Stats

13 of 13 new or added lines in 3 files covered. (100.0%)

29 existing lines in 8 files now uncovered.

34846 of 76643 relevant lines covered (45.47%)

115.51 hits per line