mcp::auth::DpopBearerAuthProvider Class Reference

Server AuthProvider backed by injected JWT and DPoP verifiers. More...

#include <server_auth_provider.hpp>

Inheritance diagram for mcp::auth::DpopBearerAuthProvider:

Public Types
using	AccessTokenHashFunction = std::function< core::Result< std::string >(std::string_view access_token)>

Public Member Functions
	DpopBearerAuthProvider (JwtVerifier &jwt_verifier, DpopVerifier &dpop_verifier, AccessTokenHashFunction access_token_hash, DpopReplayCache *replay_cache=nullptr, DpopAuthProviderOptions options={})
core::Result< server::AuthIdentity >	authenticate (const server::AuthRequest &request) override
	Authenticate a transport request.

Detailed Description

Server AuthProvider backed by injected JWT and DPoP verifiers.

This provider does not parse or trust JWT payloads by itself. Access-token validation, proof signature verification, and access-token hash calculation are supplied by application or future OpenSSL-backed auth implementations.

Member Function Documentation

authenticate()

core::Result< server::AuthIdentity > mcp::auth::DpopBearerAuthProvider::authenticate ( const server::AuthRequest &  request )

inlineoverridevirtual

Authenticate a transport request.

Parameters

request

Headers and remote metadata to evaluate.

Returns

AuthIdentity on success, or a core::Error describing denial or provider failure.

Note

Implementations may be called concurrently by transports that dispatch requests on multiple threads.

Implements mcp::server::AuthProvider.

---

The documentation for this class was generated from the following file:

• sdk/auth/include/cxxmcp/auth/server_auth_provider.hpp