Skip to content

Set correct OAuth2 protected metadata challenge parameter #49662

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Aug 21, 2025
Merged

Set correct OAuth2 protected metadata challenge parameter #49662

merged 1 commit into from
Aug 21, 2025

Conversation

sberyozkin
Copy link
Member

Quarkus OIDC sets a wrong request_metadata WWW-Authenticate challenge parameter, missing the .well-known/oauth-protected-resource path, as required by both RFC9728 and expected by the MCP clients.

michalvavrik
michalvavrik approved these changes Aug 21, 2025
View reviewed changes
Copy link
Member

@michalvavrik michalvavrik left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the fix.

@quarkus-bot quarkus-bot
Copy link

quarkus-bot bot commented Aug 21, 2025 •
edited by github-actions bot
Loading

Status for workflow Quarkus CI

This is the status report for running Quarkus CI on commit 370926a.

✅ The latest workflow run for the pull request has completed successfully.

It should be safe to merge provided you have a look at the other checks in the summary.

You can consult the Develocity build scans.

@sberyozkin sberyozkin merged commit 8422ed3 into quarkusio:main Aug 21, 2025
28 checks passed
@quarkus-bot quarkus-bot bot added this to the 3.28 - main milestone Aug 21, 2025
@sberyozkin sberyozkin deleted the oidc_protected_resource_metadata_www_authenticate branch August 21, 2025 13:54
@michalvavrik michalvavrik mentioned this pull request Aug 28, 2025
Closed
@gsmet gsmet modified the milestones: 3.28 - main, 3.26.2 Sep 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@gastaldi gastaldi gastaldi approved these changes

+1 more reviewer

@michalvavrik michalvavrik michalvavrik approved these changes

Reviewers whose approvals may not affect merge requirements
Assignees
No one assigned
Labels
area/oidc
Projects
None yet
Milestone
3.26.2
Development

Successfully merging this pull request may close these issues.
4 participants
@sberyozkin @gastaldi @michalvavrik @gsmet