Interface McpSubscriptionAuthorizationContext

@ThreadSafe public interface McpSubscriptionAuthorizationContext
Immutable context for one bounded MCP subscription authorization check.

The initial request context is historical admission evidence and never becomes current authority. The application context reflects initial admission for the first check and the latest successful authorization result thereafter. Candidate notification families and targets describe the initial request before acknowledgement; renewal checks describe the acknowledged subscription and cannot expand it. Exact 2025-era resource grants use the real resources/subscribe admission context and one selected URI; their catalog-family flags are false and task-ID set is empty. A later successful subscribe replaces historical evidence for subsequent checks without extending the original total grant lifetime. GET admission remains independent and does not manufacture an RPC request context.

Author:
Mark Allen

  • Method Details

    • getInitialRequestContext

      @NonNull McpRequestContext getInitialRequestContext()
      Returns the immutable request context from original subscription admission, or the latest successful exact 2025-era subscribe for a resource grant. It is historical evidence, including the original immutable HTTP request and identity; the authorizer must check current application authority.
      Returns:
      retained subscription admission request context

    • getApplicationContext

      @NonNull Optional<@NonNull Object> getApplicationContext()
      Returns the current application authorization context. Absence is a valid replacement and does not retain an older context implicitly.
      Returns:
      current application context, when present

    • getPreviousValidUntil

      @NonNull Optional<@NonNull Instant> getPreviousValidUntil()
      Returns the previous effective, server-capped authorization expiration. This is empty for the initial check and is historical information during reconciliation, not proof of a currently active grant.
      Returns:
      previous effective expiration, when one exists

    • getDeadline

      @NonNull Instant getDeadline()
      Returns the fixed wall-clock representation of this check's queue-inclusive deadline. This is neither credential expiry nor the maximum validity an authorizer may request.
      Returns:
      this authorization check's deadline

    • isToolsListChangedIncluded

      @NonNull Boolean isToolsListChangedIncluded()
      Returns:
      whether tool-list-change delivery is included

    • isPromptsListChangedIncluded

      @NonNull Boolean isPromptsListChangedIncluded()
      Returns:
      whether prompt-list-change delivery is included

    • isResourcesListChangedIncluded

      @NonNull Boolean isResourcesListChangedIncluded()
      Returns:
      whether resource-list-change delivery is included

    • getResourceSubscriptionUris

      @NonNull Set<@NonNull URI> getResourceSubscriptionUris()
      Returns an immutable set of unique resource-subscription URIs. Membership, not iteration order, is semantically significant.
      Returns:
      immutable resource-subscription URI set, possibly empty

    • getTaskIds

      @NonNull Set<@NonNull String> getTaskIds()
      Returns an immutable set of unique task IDs. IDs identify tasks rather than subscription handles; membership, not iteration order, is semantically significant.
      Returns:
      immutable task-ID set, possibly empty