Enum RouterError 

pub enum RouterError {
    Header(InvalidHeaderValue),
    UnprotectedAuthenticator,
}

The Streamable HTTP route table.

The error returned by McpRouter::into_router.

Two failure modes, both at mount time rather than at the first request: a configured security header that is not a legal HTTP value (Header), and the silent-fail-open combination described in issue #11 (UnprotectedAuthenticator). The router was previously typed Result<_, InvalidHeaderValue> and the new variant widens it; callers that used ? continue to work because the existing ServeError::Routes wraps InvalidHeaderValue and BridgeServeError::Router does the same.

Variants

Header(InvalidHeaderValue)

A configured security header is not a legal HTTP header value.

Surfaces a malformed SecurityHeaders at mount time rather than at the first response. The alternative is a server that starts and then answers every request with a header set it cannot write.

UnprotectedAuthenticator

A real authenticator was wired but the policy is still the default AuthPolicy::Public.

The combination is the exact fail-open the issue #11 review described: with_authenticator is consulted, a valid token produces a scoped AuthContext, but AuthPolicy::refuse answers None on an empty required() and the endpoint is served to anonymous callers. Failing closed here means a deployment that wired a token authenticator but forgot the with_policy call gets a startup error, not a permission boundary that does not exist.

The fix is to follow with_authenticator with with_policy(AuthPolicy::Require(scopes)) — or, for a deployment that genuinely wants anonymous callers, drop the with_authenticator call entirely.

Trait Implementations

impl Debug for RouterError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for RouterError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for RouterError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<InvalidHeaderValue> for RouterError

fn from(value: InvalidHeaderValue) -> Self

Converts to this type from the input type.

impl From<RouterError> for BridgeServeError

fn from(source: RouterError) -> Self

Converts to this type from the input type.

impl From<RouterError> for ServeError

fn from(source: RouterError) -> Self

Converts to this type from the input type.