paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 41 Packages Projects Releases Wiki Activity

feat: change resource url to comply with RFC 9728 Section 7.3 (#33855)

Browse Source 
* feat: change oauth protected resource url to comply with RFC 9728 Section 7.3

Signed-off-by: Vincent Rittner <Vincent_R@gmx.de>

* feat: enable dynamic mcp resource paths

Signed-off-by: Vincent Rittner <Vincent_R@gmx.de>

* refactor: move url discovery in route handler

Signed-off-by: Vincent Rittner <Vincent_R@gmx.de>

* refactor: revert to upfront route registration

Signed-off-by: Vincent Rittner <Vincent_R@gmx.de>

---------

Signed-off-by: Vincent Rittner <Vincent_R@gmx.de>
This commit is contained in:
vincent
2026-04-14 14:13:24 +02:00
committed by GitHub
parent 297302ebce
commit c6abc52e1f
3 changed files with 92 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.changeset/shaky-years-doubt.md
+6
View File
@@ -0,0 +1,6 @@
---
'@backstage/plugin-mcp-actions-backend': patch
---
Fixed the `.well-known/oauth-protected-resource` resource URL to comply with
[RFC 9728 Section 7.3](https://datatracker.ietf.org/doc/html/rfc9728#name-impersonation-attacks). Enabling dynamic resource paths.