# packages/connectors/nethttp/go

## Scope
- Covers the Go net/http connector module under `packages/connectors/nethttp/go/`.

## Architecture Design
- The module adapts `transport/mcp/go.Authenticate` results to `http.Handler` middleware.

## Required
- Must use Go 1.26 and the standard library `net/http`.
- Must map authentication errors to stable HTTP status codes and JSON bodies.
- Must keep caller-provided revocation behavior wired through transport authentication.

## Forbidden
- Must not reimplement JWT verification, JWKS fetching, or revocation lookup directly.
- Must not depend on storage backends or non-standard HTTP frameworks.
- Must not pass unauthenticated requests to downstream handlers.

## Validation
- Validate with `go test ./packages/connectors/nethttp/go/...`.

