To add Authorization or CORS support, is the "WithHTTPServer" the preferred method to inject custom middleware?

[patwhite]

I'm trying to configure a web browser client to connect with custom authorization and across domains (in a config that would require CORS). I'm trying to use the "WithHttpServer) option but not having luck, is that the intended use of that option?

[Dokiys]

I came across a similar question. There's no exported http.ResponseWriter, and while server.WithStreamableHTTPServer() seems to work for your case.

	handler := func(respWriter http.ResponseWriter, req *http.Request) {
		if req.Header.Get("Authorization") != "1" {
			respWriter.WriteHeader(403)
		}
	}
	ss := &http.Server{
		Addr: ":8080",
	}
	ss.Handler = http.HandlerFunc(handler)
	
	server.NewStreamableHTTPServer(mcpServer, server.WithStreamableHTTPServer(ss))

I would rather not implement a custom http.Server.I'm also looking for a simpler way to handle authorization checks.

[Dokiys]

I found that if you use WithStreamableHTTPServer, your http.Server must implement all the mcp standard APIs yourself. So what's the point of using mcp-go?

[ningdeng]

This is sad