Fix OAuth metadata endpoint in separate mode
Remove incorrect mcpAuthMetadataRouter call when running in separate mode. The resource server should not serve OAuth metadata endpoints - only the auth server should provide these endpoints.
This commit is contained in:
parent
67d9a94853
commit
56a43ac67f
1 changed files with 3 additions and 6 deletions
|
|
@ -227,12 +227,9 @@ if (AUTH_MODE === 'integrated') {
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
// Serve resource metadata only (not auth endpoints)
|
// In separate mode, we don't serve OAuth metadata endpoints
|
||||||
app.use(mcpAuthMetadataRouter({
|
// The auth server handles all OAuth metadata
|
||||||
oauthMetadata: authMetadata,
|
// We only need to configure the bearer auth middleware
|
||||||
resourceServerUrl: new URL(BASE_URI),
|
|
||||||
resourceName: "MCP Everything Server"
|
|
||||||
}));
|
|
||||||
|
|
||||||
// Configure bearer auth with external verifier
|
// Configure bearer auth with external verifier
|
||||||
const externalVerifier = new ExternalAuthVerifier(AUTH_SERVER_URL);
|
const externalVerifier = new ExternalAuthVerifier(AUTH_SERVER_URL);
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue