validateAuthorizationResponseIssuer method

Future<void> validateAuthorizationResponseIssuer(
  1. String? responseIssuer
)

Validate the iss parameter of an authorization response (RFC 9207, as MCP applies it): a present one must equal the issuer exactly; an absent one is refused when the server advertises authorization_response_iss_parameter_supported. Throws OAuthError.

Implementation

Future<void> validateAuthorizationResponseIssuer(
    String? responseIssuer) async {
  final metadata = await _discoverMetadata();
  checkAuthorizationResponseIssuer(
    recordedIssuer: metadata.issuer,
    issParameterSupported: metadata.authorizationResponseIssParameterSupported,
    iss: responseIssuer,
  );
}