Package com.xebialabs.xlrelease.mcp.config

Class McpOAuthDiscoveryConfiguration

java.lang.Object

com.xebialabs.xlrelease.mcp.config.McpOAuthDiscoveryConfiguration

@Configuration(proxyBeanMethods=false)
@Profile("oidcAuth")
public class McpOAuthDiscoveryConfiguration
extends Object

OAuth 2.0 discovery for the MCP endpoint, active only under the oidcAuth profile — i.e. when the customer authenticates Release against their own OIDC provider (Keycloak, Okta, ...). Publishes the RFC 9728 protected resource metadata at /.well-known/oauth-protected-resource (pointing at the configured OIDC issuer) and the matching mcpAuthenticationEntryPoint that advertises it on 401s from the MCP security chain (see xlrelease-oidc-authentication.xml).

Purely additive: the MCP endpoint keeps accepting PAT and basic auth (and the OIDC bearer JWT) exactly as before; this only lets MCP clients such as Claude discover the OAuth option. On default-auth installs this configuration is not loaded and nothing changes.

Constructor Summary

Constructors

Constructor	Description
McpOAuthDiscoveryConfiguration()

Method Summary

Modifier and Type	Method	Description
McpAuthenticationEntryPoint	mcpAuthenticationEntryPoint(org.springframework.core.env.Environment environment, com.xebialabs.deployit.ServerConfiguration serverConfiguration, org.springframework.beans.factory.ObjectProvider<org.springframework.boot.webmvc.autoconfigure.WebMvcProperties> webMvcProperties)	Referenced by id from the MCP security chain in xlrelease-oidc-authentication.xml.
org.springframework.boot.web.servlet.ServletRegistrationBean<McpProtectedResourceMetadataServlet>	mcpProtectedResourceMetadataServlet(org.springframework.core.env.Environment environment, com.xebialabs.deployit.ServerConfiguration serverConfiguration, org.springframework.beans.factory.ObjectProvider<org.springframework.boot.webmvc.autoconfigure.WebMvcProperties> webMvcProperties)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

McpOAuthDiscoveryConfiguration

public McpOAuthDiscoveryConfiguration()

Method Details

mcpProtectedResourceMetadataServlet

@Bean
public org.springframework.boot.web.servlet.ServletRegistrationBean<McpProtectedResourceMetadataServlet> mcpProtectedResourceMetadataServlet(org.springframework.core.env.Environment environment,
 com.xebialabs.deployit.ServerConfiguration serverConfiguration,
 org.springframework.beans.factory.ObjectProvider<org.springframework.boot.webmvc.autoconfigure.WebMvcProperties> webMvcProperties)

mcpAuthenticationEntryPoint

@Bean
public McpAuthenticationEntryPoint mcpAuthenticationEntryPoint(org.springframework.core.env.Environment environment,
 com.xebialabs.deployit.ServerConfiguration serverConfiguration,
 org.springframework.beans.factory.ObjectProvider<org.springframework.boot.webmvc.autoconfigure.WebMvcProperties> webMvcProperties)

Referenced by id from the MCP security chain in xlrelease-oidc-authentication.xml.