Class OAuthBearerTokenVerifier

Composite bearer-token verifier for hosted MCP requests.

Remarks

Dual-mode deployments prefer introspection because it can enforce revocation. JWKS verification is used when no introspection endpoint is configured.

Implements

OAuthTokenVerifier

Index

Constructors

Methods

verifyAccessToken

Constructors

constructor

new OAuthBearerTokenVerifier(
options?: OAuthBearerTokenVerifierOptions,
): OAuthBearerTokenVerifier
Create a composite OAuth bearer-token verifier.
Parameters
- options: OAuthBearerTokenVerifierOptions = {}
  Verifier configuration and dependency overrides.
Returns OAuthBearerTokenVerifier
- Defined in oauth-resource-server.ts:1876

Methods

verifyAccessToken

verifyAccessToken(token: string): Promise<AuthInfo>
Verify a bearer token with the configured mechanism.
Parameters
- token: string
  Raw bearer token value without the Bearer prefix.
Returns Promise<AuthInfo>
MCP auth information for the verified token.

Throws
OAuthError when no verifier is configured or the token is rejected.

Throws
OAuthDependencyError when the selected verifier cannot reach its OAuth dependency.
Implementation of OAuthTokenVerifier.verifyAccessToken
- Defined in oauth-resource-server.ts:1897