chore: fix doc

Author: hashemix

Makefile.toml

@@ -41,8 +41,13 @@ command = "cargo"
 args = ["test", "--doc", "-p", "rust-mcp-macros"]
 
 
+[tasks.doc-strict]
+command = "cargo"
+args = ["doc", "--no-deps"]
+env = { RUSTDOCFLAGS = "-D warnings" }
+
 [tasks.check]
-dependencies = ["fmt", "clippy", "test", "doc-test"]
+dependencies = ["fmt", "clippy", "test", "doc-strict", "doc-test"]
 
 [tasks.clippy-fix]
 command = "cargo"

crates/rust-mcp-extra/src/auth_provider/keycloak.rs

@@ -39,7 +39,7 @@ static SCOPES_SUPPORTED: &[&str] = &[
 
 /// Configuration options for the Keycloak OAuth provider.
 pub struct KeycloakAuthOptions<'a> {
-    /// Base URL of the Keycloak server (e.g. https://keycloak.example.com)
+    /// Base URL of the Keycloak server (e.g. `https://keycloak.example.com`)
     pub keycloak_base_url: String,
     /// Public base URL of this MCP server (used for discovery endpoints)
     pub mcp_server_url: String,

crates/rust-mcp-sdk/src/auth/spec/audience.rs

@@ -11,7 +11,7 @@ pub enum Audience {
 }
 
 impl Audience {
-    /// Converts the audience to a Vec<String> for uniform access.
+    /// Converts the audience to a `Vec<String>` for uniform access.
     pub fn to_vec(&self) -> Vec<String> {
         match self {
             Audience::Single(s) => vec![s.clone()],

crates/rust-mcp-sdk/src/auth/spec/discovery.rs

@@ -19,15 +19,15 @@ pub struct AuthorizationServerMetadata {
     /// URL to exchange authorization codes for tokens or refresh tokens.
     pub token_endpoint: Url,
 
-    /// URL of the authorization server's JWK Set [JWK] document
+    /// URL of the authorization server's JWK Set `JWK` document
     #[serde(default, skip_serializing_if = "::std::option::Option::is_none")]
     pub jwks_uri: Option<Url>,
 
     /// Endpoint where clients can register dynamically.
     #[serde(default, skip_serializing_if = "::std::option::Option::is_none")]
     pub registration_endpoint: Option<Url>,
 
-    /// List of supported OAuth scopes (e.g., "openid", "profile", "email", mcp:tools) [RECOMMENDED]
+    /// List of supported OAuth scopes (e.g., "openid", "profile", "email", mcp:tools)
     #[serde(default, skip_serializing_if = "::std::option::Option::is_none")]
     pub scopes_supported: Option<Vec<String>>,
 
@@ -58,7 +58,7 @@ pub struct AuthorizationServerMetadata {
     pub token_endpoint_auth_signing_alg_values_supported: Option<Vec<String>>,
 
     /// Link to human-readable docs for developers.
-    /// https://datatracker.ietf.org/doc/html/rfc8414
+    /// <https://datatracker.ietf.org/doc/html/rfc8414>
     #[serde(default, skip_serializing_if = "::std::option::Option::is_none")]
     pub service_documentation: Option<Url>,
 
@@ -171,7 +171,7 @@ impl AuthorizationServerMetadata {
 /// represents metadata about a protected resource in the OAuth 2.0 ecosystem.
 /// It allows clients and authorization servers to discover how to interact with a protected resource (like an MCP endpoint),
 /// including security requirements and supported features.
-/// https://datatracker.ietf.org/doc/rfc9728/
+/// <https://datatracker.ietf.org/doc/rfc9728>
 #[derive(Debug, Serialize, Deserialize, Clone)]
 pub struct OauthProtectedResourceMetadata {
     /// The base identifier of the protected resource (e.g., an MCP server's URI).
@@ -185,7 +185,7 @@ pub struct OauthProtectedResourceMetadata {
 
     /// URL where the resource exposes its public keys (JWKS) to verify signed tokens.
     /// Typically used to verify JWT access tokens.
-    /// Example: "https://example.com/.well-known/jwks.json"
+    /// Example: `https://example.com/.well-known/jwks.json`
     #[serde(default, skip_serializing_if = "::std::option::Option::is_none")]
     pub jwks_uri: Option<Url>,
 
@@ -245,7 +245,7 @@ pub struct OauthProtectedResourceMetadata {
 }
 
 impl OauthProtectedResourceMetadata {
-    /// Creates a new [`OAuthProtectedResourceMetadata`] instance with only the
+    /// Creates a new `OAuthProtectedResourceMetadata` instance with only the
     /// minimal required fields populated.
     ///
     /// The `resource` and each entry in `authorization_servers` must be valid URLs.