Centralized configuration management for OAuth 2.1 authorization server settings.

This module provides a unified interface for managing OAuth authorization server configurations including validation, runtime updates, and environment-based settings. It supports multiple authorization servers and provides validation for security requirements (HTTPS enforcement, etc.).

Configuration Format

The configuration can be specified in multiple ways:

Application Environment

config :ex_mcp, ExMCP.Authorization.ServerConfig,
  default_server: :auth_server,
  servers: %{
    auth_server: %{
      introspection_endpoint: "https://auth.example.com/introspect",
      realm: "mcp-server",
      client_id: "mcp-server-id",
      client_secret: "server-secret"
    },
    backup_server: %{
      introspection_endpoint: "https://backup-auth.example.com/introspect",
      realm: "mcp-backup"
    }
  }

Runtime Configuration

ExMCP.Authorization.ServerConfig.put_server(:my_server, %{
  introspection_endpoint: "https://new-auth.example.com/introspect",
  realm: "my-realm"
})

Usage

# Get default server config
{:ok, config} = ExMCP.Authorization.ServerConfig.get_server()

# Get specific server config
{:ok, config} = ExMCP.Authorization.ServerConfig.get_server(:backup_server)

# Validate configuration
:ok = ExMCP.Authorization.ServerConfig.validate_config(config)

# List all configured servers
servers = ExMCP.Authorization.ServerConfig.list_servers()