Class McpAdmissionRejection

java.lang.Object
com.soklet.McpAdmissionRejection

@ThreadSafe public final class McpAdmissionRejection extends Object
Typed MCP admission rejection. Soklet owns envelope serialization and suppresses the body for notifications. Application response headers are validated by the builder and revalidated before transport. A BearerAuthenticationChallenge supplies a validated WWW-Authenticate value; the application owns token verification, protected-resource metadata, and scope policy. Unsafe, framework-owned, hop-by-hop, CORS, and obsolete transport-state headers fail during header construction without exposing custom names or values.

Header names must be ASCII HTTP tokens and unique ignoring case. Value lists must be nonempty; each value may be empty but must contain only visible ASCII or horizontal tabs. The fixed limits are 100 header fields and 65,536 bytes, counting each field as its name length plus value length plus four bytes.

Reserved names, ignoring case, are Cache-Control, Connection, Content-Encoding, Content-Length, Content-Type, Keep-Alive, Proxy-Authenticate, Proxy-Authorization, Proxy-Connection, TE, Trailer, Transfer-Encoding, Upgrade, Retry-After, Mcp-Session-Id, Last-Event-ID, and every name beginning with Access-Control-.

Author:
Mark Allen