OAuth 2.0 resource-server helpers for hosted MCP deployments.
Remarks
HTTP deployments can protect the MCP endpoint with bearer tokens while B2
credentials remain server-side or principal-scoped. This module loads OAuth
configuration, publishes authorization-server/resource metadata, verifies
tokens by introspection or JWKS, and converts verification failures into MCP
OAuth challenge responses.
OAuth 2.0 resource-server helpers for hosted MCP deployments.
Remarks
HTTP deployments can protect the MCP endpoint with bearer tokens while B2 credentials remain server-side or principal-scoped. This module loads OAuth configuration, publishes authorization-server/resource metadata, verifies tokens by introspection or JWKS, and converts verification failures into MCP OAuth challenge responses.