Skip to content

Support an end-user friendly OAuthAuthorizationCodeAuthenticator #9

@erwinkramer

Description

@erwinkramer

In a perfect world, the AddAuthentication() method for OpenAPI allows some kind of OAuthAuthorizationCodeAuthenticator, which not only should read from the OpenAPI OAuth 2.0 security segment to get the required values, such as these, but also allows for interactive authentication through prompting with the MCP server, allowing for each end-user to use their own credentials.

Eventually, the need to specify authentication on configuration of the server (via AddAuthentication()) should be redundant, since all 'server' values should be specified in the OpenAPI spec (and can be different for each operation!), and all the 'user' values - whether it be a client secret, or a token fetched from interactive credential - should be retrieved from the user.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions