Work through the spec-conformance gaps recorded by the interaction suite - #2999

Draft

maxisbey wants to merge 14 commits into

mainfrom

requirements-divergences

Commits on Jun 27, 2026

Tighten requirements-catalog divergence notes to match current SDK behaviour
maxisbey
committed
68e4eb2
Emit RFC 6750 scope= in WWW-Authenticate and validate token audience
maxisbey
committed
bad42e2
Stop replying to cancelled requests; map unhandled handler exceptions to -32603
maxisbey
committed
47639a2
Reject bearer tokens that carry no audience claim
maxisbey
committed
a173446
Use spec error codes for unhandled elicitation/create and roots/list
maxisbey
committed
884badc
Reject non-HTTPS, non-loopback redirect URIs at client registration
maxisbey
committed
24061fe
Align OAuth client with spec on PKCE verification and scope selection
maxisbey
committed
3eb352c
Reject a second initialize on an already-initialized session
maxisbey
committed
1e2bd9b
Make the prompt test's opaque coverage workaround explicit
maxisbey
committed
8f60ebe
Add an opt-in strict_capabilities flag to Client and ClientSession
maxisbey
committed
28f500c
Deprecate ServerSession.send_progress_notification
maxisbey
committed
eddfa29
Type the elicitation requested schema on the send side
maxisbey
committed
3605ec0
Record two divergences as intentional, ecosystem-consistent choices
maxisbey
committed
c2b3e8e

Commits on Jun 28, 2026

Close cancelled HTTP exchanges and harden auth validation
maxisbey
committed
c53aefd