azmaveth / ex_mcp / db23962adcd41693516e76afdf0a0e5e5d84c1b4

65%

Build Type

push

github

Committed by azmaveth

Commit Message

feat: cross-app access flow — token exchange + JWT bearer grant (9/9 conformance)

Implement the full cross-app access flow from ext-auth specification:
1. Exchange IdP ID token for ID-JAG via RFC 8693 token exchange
2. Present ID-JAG to authorization server via RFC 7523 JWT bearer grant
3. Use client_secret_basic auth for the JWT bearer step

Every conformance scenario now passes:
- Main: 228/228 client, 39/39 server
- Extensions: client-credentials-jwt 8/8, basic 8/8, cross-app 9/9
- Backcompat: 2025-03-26 backcompat 12/12, fallback 7/7
- Draft: resource-mismatch 2/2

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Coverage Stats

0 of 25 new or added lines in 1 file covered. (0.0%)

511 existing lines in 5 files now uncovered.

1433 of 15130 relevant lines covered (9.47%)

6.18 hits per line