ReleaseCloudflare (Workers AI)Cloudflare (Workers AI)published Mar 29, 2026seen Jun 26

cloudflare/workers-oauth-provider v0.3.2

cloudflare/workers-oauth-provider

Open original ↗

Captured source

source ↗
published Mar 29, 2026seen Jun 26captured 4whttp 200method plain

v0.3.2

Repository: cloudflare/workers-oauth-provider

Tag: v0.3.2

Published: 2026-03-29T23:01:19Z

Prerelease: no

Release notes:

Patch Changes

  • #173 `1fe656e` Thanks @mattzcarey! - Support path-suffixed well-known URLs for OAuth Protected Resource Metadata (RFC 9728 §3.1). Resources with path components (e.g. https://example.com/mcp) now correctly serve metadata at /.well-known/oauth-protected-resource/mcp and return the derived resource identifier in the resource field.
  • #174 `ac120ff` Thanks @mattzcarey! - Include the request path in the resource_metadata URL within WWW-Authenticate headers (RFC 9728 §5.1). API endpoints with path components (e.g. /mcp) now advertise the correct path-suffixed metadata URL so clients can discover the resource-specific metadata.