Escaping

Author: localden

src/ModelContextProtocol.AspNetCore/Auth/McpAuthenticationHandler.cs

@@ -130,7 +130,7 @@ protected override Task HandleChallengeAsync(AuthenticationProperties properties
 
         // Set the WWW-Authenticate header with the resource_metadata
         string headerValue = $"Bearer realm=\"{Scheme.Name}\"";
-        headerValue += $", resource_metadata=\"{rawPrmDocumentUri}\"";
+        headerValue += $", resource_metadata=\"{Uri.EscapeDataString(rawPrmDocumentUri)}\"";
 
         Response.Headers["WWW-Authenticate"] = headerValue;