Discovery metadata (RFC 9728/8414), the mandatory 401 bootstrap challenge, dynamic client registration (allowed + rejected redirect URIs), the full Authorization Code + PKCE flow reaching a read tool, and the read-only guardrail that blocks write tools for OAuth connections. |
||
|---|---|---|
| .. | ||
| McpEndpointAuthTest.php | ||
| McpOAuthTest.php | ||
| McpToolsTest.php | ||
| McpWriteToolsTest.php | ||