Package com.xebialabs.xlrelease.mcp.oauth

package com.xebialabs.xlrelease.mcp.oauth

Classes

Class	Description
McpAuthenticationEntryPoint	Entry point for the MCP endpoint's security chain: behaves like Http401AuthenticationEntryPoint, but additionally advertises the RFC 9728 protected resource metadata on the 401 via a WWW-Authenticate: Bearer resource_metadata="..." challenge.
McpProtectedResourceMetadataServlet	Serves the OAuth 2.0 Protected Resource Metadata (RFC 9728) for the MCP endpoint, so MCP clients (Claude, etc.) can discover the OIDC authorization server protecting /s/mcp and run the OAuth 2.1 + PKCE flow on their own.