Uses of Class
org.apache.juneau.rest.server.mcp.v20260728.McpResourceServerConfig
Packages that use McpResourceServerConfig
Package
Description
MCP
2026-07-28 binding for juneau-rest-server-mcp.-
Uses of McpResourceServerConfig in org.apache.juneau.rest.server.mcp.v20260728
Methods in org.apache.juneau.rest.server.mcp.v20260728 that return McpResourceServerConfigModifier and TypeMethodDescriptionMcpResourceServerConfig.addAuthorizationServer(URI value) Adds an authorization-server issuer URI.McpResourceServerConfig.addOperationScope(String method, String name, String... scopes) Registers the scopes required to invoke a specific MCP operation (SEP-2350 per-operation step-up).McpResourceServerConfig.addRequiredScope(String value) Adds a required scope (also advertised as supported).McpResourceServerConfig.addScopeSupported(String value) Adds an advertised supported scope.McpOptions.getResourceServer()This binding's OAuth 2.1 resource-server (RS) configuration.McpResourceServerConfig.setAudience(String value) Sets an explicit RFC 8707 audience, overriding theresource-identifierdefault.McpResourceServerConfig.setEnabled(boolean value) Enables or disables RS authentication.McpResourceServerConfig.setOperationScopeResolver(McpOperationScopeResolver value) Installs a dynamic per-operation scope resolver, overriding the default staticmap.Sets the challenge realm.McpResourceServerConfig.setRequireAudienceClaim(boolean value) Sets whether a validated token must expose audience claims for audience enforcement to apply.McpResourceServerConfig.setResource(URI value) Sets the canonical resource identifier.McpResourceServerConfig.setTokenValidator(TokenValidator value) Sets the token validator (selects introspection vs JWT validation mode).Methods in org.apache.juneau.rest.server.mcp.v20260728 with parameters of type McpResourceServerConfigModifier and TypeMethodDescriptionstatic PrincipalMcpResourceServerSupport.authenticate(McpResourceServerConfig cfg, jakarta.servlet.http.HttpServletRequest req, jakarta.servlet.http.HttpServletResponse res) Authenticates the request against the RS config, establishing the authenticated principal.static McpProtectedResourceMetadataMcpResourceServerSupport.buildMetadata(McpResourceServerConfig cfg) Builds the RFC 9728 Protected Resource Metadata document from the config.static voidMcpResourceServerSupport.enforceOperationScopes(McpResourceServerConfig cfg, Collection<String> grantedScopes, McpOperationContext ctx) Enforces SEP-2350 per-operation step-up scopes at the POST-parse dispatch point.static voidMcpResourceServerSupport.gateMcpEndpoint(McpResourceServerConfig cfg, RestContext ctx, jakarta.servlet.http.HttpServletRequest req, jakarta.servlet.http.HttpServletResponse res) Router-identity bearer gate for theMcpEndpointmixin's MCP JSON-RPC endpoint.static voidMcpResourceServerSupport.gateMcpServlet(McpResourceServerConfig cfg, jakarta.servlet.http.HttpServletRequest req, jakarta.servlet.http.HttpServletResponse res) Router-aligned bearer gate for theMcpRestServlet'sPOST /endpoint.static StringMcpResourceServerSupport.insufficientScopeChallenge(McpResourceServerConfig cfg) Builds theWWW-Authenticatechallenge for a token missing a required baseline scope (error="insufficient_scope", with the requiredscopeset).static StringMcpResourceServerSupport.invalidTokenChallenge(McpResourceServerConfig cfg) Builds theWWW-Authenticatechallenge for an invalid/expired token or an audience mismatch (error="invalid_token").static McpProtectedResourceMetadataMcpResourceServerSupport.metadataForWellKnownPathInserted(McpResourceServerConfig cfg, RestRequest req) Serves this endpoint's PRM from the RFC 9728 path-inserted well-known location, but only when the requested suffix matches this resource's expected well-known path; otherwise404.static McpProtectedResourceMetadataMcpResourceServerSupport.metadataForWellKnownRoot(McpResourceServerConfig cfg, RestRequest req) Serves this endpoint's PRM from the SEP-2351 root well-known location (fallback), failing fast on a non-root or re-mounted mount; a no-op-throwing404when RS auth is disabled.static URIMcpResourceServerSupport.metadataUri(McpResourceServerConfig cfg) Returns the path-inserted well-known PRM URI advertised in theresource_metadatachallenge parameter.static StringMcpResourceServerSupport.missingTokenChallenge(McpResourceServerConfig cfg) Builds theWWW-Authenticatechallenge for a request that presented no bearer credentials (RFC 6750 §3: noerrorcode).McpOptions.setResourceServer(McpResourceServerConfig value) Replaces this binding's resource-server configuration outright.static StringMcpResourceServerSupport.stepUpChallenge(McpResourceServerConfig cfg, Collection<String> operationScopes) Builds the SEP-2350 scoped step-upWWW-Authenticatechallenge naming the scopes required to invoke a specific operation (error="insufficient_scope", with the operation'sscopeset).Method parameters in org.apache.juneau.rest.server.mcp.v20260728 with type arguments of type McpResourceServerConfigModifier and TypeMethodDescriptionMcpOptions.resourceServer(Consumer<McpResourceServerConfig> consumer) Mutates this binding's resource-server configuration in place.