• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

pomerium / pomerium / 23258806489
52%

Build:
DEFAULT BRANCH: main
Ran 18 Mar 2026 05:59PM UTC
Jobs 1
Files 688
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

18 Mar 2026 05:44PM UTC coverage: 45.486% (+0.02%) from 45.464%
23258806489

push

github

web-flow
fix(mcp): include request path in WWW-Authenticate resource_metadata URI (#6200)

## Summary

The resource_metadata URL in the WWW-Authenticate header was missing the
request path for path-based MCP servers, causing clients to fail OAuth
discovery due to a resource mismatch.

Per [RFC 9728
§5.1](https://datatracker.ietf.org/doc/html/rfc9728#section-5.1),
well-known URIs for path-based resources should include the path suffix.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

## Related issues

Fixes #6199

## User Explanation

When Pomerium returns a 401 for a path-based MCP server (e.g.
`https://example.com/mcp`), the `WWW-Authenticate` header now correctly
points to `/.well-known/oauth-protected-resource/mcp` instead of
`/.well-known/oauth-protected-resource`. This allows MCP clients (Gemini
CLI, Claude Code, etc.) to successfully complete OAuth discovery for
path-based MCP servers behind Pomerium.

## Checklist

- [x] reference any related issues
- [x] updated unit tests
- [x] add appropriate label (`enhancement`, `bug`, `breaking`,
`dependencies`, `ci`)
- [x] ready for review

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

6 of 6 new or added lines in 2 files covered. (100.0%)

13 existing lines in 3 files now uncovered.

34863 of 76645 relevant lines covered (45.49%)

114.62 hits per line

Coverage Regressions

Lines Coverage ∆ File
8
91.72
-1.79% pkg/ssh/policy_index_inmemory.go
3
48.64
-0.18% internal/databroker/server_clustered_follower.go
2
90.91
0.0% pkg/fanout/receive.go
Jobs
ID Job ID Ran Files Coverage
1 23258806489.1 18 Mar 2026 05:59PM UTC 688
45.49
GitHub Action Run
Source Files on build 23258806489
  • Tree
  • List 688
  • Changed 11
  • Source Changed 2
  • Coverage Changed 9
Coverage ∆ File Lines Relevant Covered Missed Hits/Line
  • Back to Repo
  • Github Actions Build #23258806489
  • 68939f43 on github
  • Prev Build on main (#23257573891)
  • Next Build on main (#23258863822)
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc