stacklok / toolhive / 27287296714

67%

Build Type

push

github

Committed by web-flow

Commit Message

Wire RFC 9728 discovery into HTTP and stdio transports (#5479)

* Wire RFC 9728 discovery into HTTP and stdio transports

All three transport backends (SSE, streamable HTTP, stdio) now accept
an optional authInfoHandler for OAuth protected resource metadata
(RFC 9728) and a prefixHandlers map for routes that must be reachable
outside the auth middleware chain.

The /.well-known/ path is always registered so OAuth clients receive a
clean JSON 404 when auth is off rather than Go's default plain-text 404.
The factory forwards both settings from Config to the StdioTransport it
creates.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* Address review feedback on transport auth discovery tests

- Replace context.Background() with t.Context() at all Start(ctx) call
  sites in the four new proxy test files (t.Cleanup closures keep
  context.Background() since t.Context() is already cancelled there)
- Consolidate six flat factory-Create tests into one table-driven test
- Add TestNew{HTTPSSEProxy,HTTPProxy}_ExactWellKnownBeatsSubtree to pin
  the ServeMux specificity invariant: an exact /.well-known/* prefix
  handler from the embedded AS must win over the /.well-known/ subtree
  PRM mount, and oauth-protected-resource must still reach the PRM handler

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Coverage Stats

48 of 56 new or added lines in 4 files covered. (85.71%)

7 existing lines in 3 files now uncovered.

67490 of 101611 relevant lines covered (66.42%)

63.56 hits per line