Chapter 13 Exercises

These exercises help you implement OAuth authentication for MCP servers.

AI-Guided Exercises

The following exercises are designed for AI-guided learning. Use an AI assistant with the course MCP server to get personalized guidance, hints, and feedback.

  1. JWT Token Validation ⭐⭐⭐ Advanced (50 min)
    • Implement JWT validation middleware
    • Configure JWKS endpoint for key retrieval
    • Validate issuer, audience, and expiration
    • Add scope-based authorization

Prerequisites

Before starting these exercises, ensure you have:

  • Completed deployment chapters (ch07-ch10)
  • Understanding of OAuth 2.0 concepts
  • Access to an identity provider (Cognito, Auth0, or Entra ID)

Next Steps

After completing these exercises, continue to: