Function GetAuthServerMetadata

auth/shared.go:23–34

GetAuthServerMetadata fetches authorization server metadata for the given issuer URL. It tries standard well-known endpoints (OAuth 2.0 and OIDC) and returns the first successful result. Returns (nil, nil) when no metadata endpoints respond (404s), allowing callers to implement fallback logic. Retu

(ctx context.Context, issuerURL string, httpClient *http.Client)

// Returns (nil, nil) when no metadata endpoints respond (404s), allowing callers to implement
// fallback logic. Returns an error for any non-client error (network failures, invalid JSON, etc.).
func GetAuthServerMetadata(ctx context.Context, issuerURL string, httpClient *http.Client) (*oauthex.AuthServerMeta, error) {
	for _, metadataURL := range authorizationServerMetadataURLs(issuerURL) {
		asm, err := oauthex.GetAuthServerMeta(ctx, metadataURL, issuerURL, httpClient)
		if err != nil {
			return nil, err
		}
		if asm != nil {
			return asm, nil
		}
	}
	return nil, nil
}

// authorizationServerMetadataURLs returns a list of URLs to try when looking for
// authorization server metadata as mandated by the MCP specification: