Max Isbey ff1b50b7e6 Resolve dot-segments when deriving and matching OAuth resource URLs ...

resource_url_from_server_url() now applies RFC 3986 remove_dot_segments
(including the %2E spellings WHATWG treats as dots) so the resource
identifier names the location the HTTP client actually requests.

check_resource_allowed() resolves both paths the same way before its
prefix comparison, and parses with urlsplit so ";parameters" stay part
of the last path segment instead of being dropped.

Fixes #3303

2026-08-20 14:53:53 +00:00

..

__init__.py

tests: add missing init files (#1831)

2026-01-06 19:52:09 +01:00

conftest.py

[v2] Dispatcher/ServerRunner receive-path swap — replaces BaseSession (#2710)

2026-06-09 12:58:47 +01:00

test_auth_utils.py

Resolve dot-segments when deriving and matching OAuth resource URLs

2026-08-20 14:53:53 +00:00

test_auth.py

Split the registration request model from the registered-client record (#3181)

2026-07-27 23:11:01 +01:00

test_context_streams.py

[v2] ClientSession runs on JSONRPCDispatcher; BaseSession removed (#2838)

2026-06-15 14:46:34 +01:00

test_context.py

[v2] Dispatcher/ServerRunner receive-path swap — replaces BaseSession (#2710)

2026-06-09 12:58:47 +01:00

test_dispatcher.py

Add the client-side subscriptions/listen driver (#3047)

2026-07-07 14:26:09 +01:00

test_exceptions.py

Split protocol types into a standalone mcp-types package (#2973)

2026-06-25 19:18:38 +02:00

test_extension.py

Add a client extension API (#3034)

2026-06-30 21:31:02 +01:00

test_httpx_utils.py

Replace httpx and httpx-sse with httpx2 (#2972)

2026-07-14 17:05:08 +01:00

test_inbound.py

Acknowledge notification POSTs with 202 on the 2026-07-28 HTTP entry (#3326)

2026-08-17 21:15:35 +01:00

test_jsonrpc_dispatcher.py

Fail fast on server-to-client requests in JSON-response mode instead of hanging (#3195)

2026-07-28 11:04:51 +01:00

test_otel.py

Make OpenTelemetry tracing the single default middleware (#2995)

2026-06-26 15:47:37 +02:00

test_path_security.py

feat: RFC 6570 URI templates with operator-aware security (#2356)

2026-06-26 20:29:17 +02:00

test_peer.py

Extend resolver DI to sampling and roots requests (#3049)

2026-07-06 18:25:57 +01:00

test_sse.py

Replace httpx and httpx-sse with httpx2 (#2972)

2026-07-14 17:05:08 +01:00

test_streamable_http.py

Narrow message_handler's parameter to notifications and exceptions (#3168)

2026-07-26 00:24:48 +01:00

test_tool_name_validation.py

fix: reject trailing newline in tool-name and URI-template varname validation (#3076)

2026-07-10 12:56:54 +00:00

test_uri_template.py

fix: reject trailing newline in tool-name and URI-template varname validation (#3076)

2026-07-10 12:56:54 +00:00