Skip to content

Commit a18fbd9

Browse files
fix(auth): always validate required redirect_uris at registration
1 parent cbd2d8b commit a18fbd9

1 file changed

Lines changed: 11 additions & 12 deletions

File tree

src/mcp/server/auth/handlers/register.py

Lines changed: 11 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -91,18 +91,17 @@ async def handle(self, request: Request) -> Response:
9191
status_code=400,
9292
)
9393

94-
if client_metadata.redirect_uris is not None:
95-
for redirect_uri in client_metadata.redirect_uris:
96-
try:
97-
validate_registered_redirect_uri(redirect_uri)
98-
except ValueError as error:
99-
return PydanticJSONResponse(
100-
content=RegistrationErrorResponse(
101-
error="invalid_client_metadata",
102-
error_description=str(error),
103-
),
104-
status_code=400,
105-
)
94+
for redirect_uri in client_metadata.redirect_uris:
95+
try:
96+
validate_registered_redirect_uri(redirect_uri)
97+
except ValueError as error:
98+
return PydanticJSONResponse(
99+
content=RegistrationErrorResponse(
100+
error="invalid_client_metadata",
101+
error_description=str(error),
102+
),
103+
status_code=400,
104+
)
106105

107106
client_id_issued_at = int(time.time())
108107
client_secret_expires_at = (

0 commit comments

Comments
 (0)