EnterpriseHandler is an implementation of [auth.OAuthHandler] that uses Enterprise Managed Authorization (SEP-990) to obtain access tokens. The flow consists of: 1. OIDC Login: User authenticates with enterprise IdP → ID Token 2. Token Exchange (RFC 8693): ID Token → ID-JAG at IdP 3. JWT Bearer Gra
| 86 | // 2. Token Exchange (RFC 8693): ID Token → ID-JAG at IdP |
| 87 | // 3. JWT Bearer Grant (RFC 7523): ID-JAG → Access Token at MCP Server |
| 88 | type EnterpriseHandler struct { |
| 89 | config *EnterpriseHandlerConfig |
| 90 | |
| 91 | // tokenSource is the token source obtained after authorization. |
| 92 | tokenSource oauth2.TokenSource |
| 93 | } |
| 94 | |
| 95 | // Compile-time check that EnterpriseHandler implements auth.OAuthHandler. |
| 96 | var _ auth.OAuthHandler = (*EnterpriseHandler)(nil) |
nothing calls this directly
no outgoing calls
no test coverage detected