1
62%
main: 62%

Ran 18 Feb 2026 10:03AM UTC

Files 535

Run time 16s

Badge

Embed ▾

Committed 18 Feb 2026 09:54AM UTC coverage: 62.214% (-0.004%) from 62.218%

Job # 22134885056.1

Build Type

push

github

Committed by

web-flow

Commit Message

Remove jwks_uri from Protected Resource Metadata response (#3853)

* Remove jwks_uri from Protected Resource Metadata response

RFC 9728 defines jwks_uri in PRM as the resource server's own signing
keys (e.g. FAPI message signing), not the authorization server's keys.

ToolHive's MCP servers don't sign responses, so the field should be
absent. Since lazy OIDC discovery (5fd6adb), the JWKS URL was empty at
handler construction time, producing "jwks_uri": "" which fails the MCP
TypeScript SDK's Zod validation and causes PRM to be silently discarded
by clients like Cursor.

Fixes: #3852

* Add regression issue link to jwks_uri absence test

Run Details

44830 of 72058 relevant lines covered (62.21%)

78.12 hits per line

stacklok / toolhive / 22134885056 / 1
62%
main: 62%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 22134885056.1

stacklok / toolhive / 22134885056 / 1 62% main: 62%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 22134885056.1

stacklok / toolhive / 22134885056 / 1
62%
main: 62%

README BADGES
x