mcp: Add client-side scope accumulation#944

Open

guglielmo-san wants to merge 18 commits intomainfrom

guglielmoc/SEP-2350_clientside_scope_accumulation

Commits on May 4, 2026

feat: implement scope accumulation in AuthorizationCode and ClientCredentials handlers to support incremental step-up authorization
guglielmo-san
committed

Commits on May 7, 2026

refactor: track granted scopes per issuer and remove mutexes in OAuth handlers
guglielmo-san
committed

Commits on May 8, 2026

refactor: consolidate scope union and update logic in authorization handlers and use sorted slice comparisons in tests
guglielmo-san
committed
Merge branch 'main' into guglielmoc/SEP-2350_clientside_scope_accumulation
guglielmo-san
authored
fix: improve scope accumulation logic to exclude ungranted scopes and clear token source on error
guglielmo-san
committed
refactor: consolidate UnionScopes and ScopesFromToken into shared auth package
guglielmo-san
committed
docs: clarify comment to reference previously granted instead of requested scopes during step-up authorization
guglielmo-san
committed
refactor: rename scopes variable to requestedScopes for clarity in client credentials flow
guglielmo-san
committed
refactor: initialize grantedScopes map in AuthorizationCodeHandler and ClientCredentialsHandler constructors
guglielmo-san
committed
fix: allow empty strings as valid scope values in ScopesFromToken
guglielmo-san
committed
Update auth/authorization_code.go

guglielmo-san
and
maciej-kisiel
authored
refactor: move scope utility functions to internal/authutil package
guglielmo-san
committed
Merge branch 'main' into guglielmoc/SEP-2350_clientside_scope_accumulation
guglielmo-san
authored