Implement SEP-990 Enterprise Managed OAuth#1721

Open

BinoyOza-okta wants to merge 32 commits into

modelcontextprotocol:mainfrom

BinoyOza-okta:feature/sep-990-enterprise-oauth

Commits on Mar 17, 2026

Commits on Mar 23, 2026

Commits on Mar 25, 2026

- Remove dead is_token_valid() guard from _perform_authorization; parent only calls this when new tokens are needed, so it runs unconditionally now
BinoyOza-okta
committed

Commits on Mar 26, 2026

fix(auth): harden enterprise managed auth with RFC compliance fixes
BinoyOza-okta
committed