Author	SHA1	Message	Date
Basil Hosmer	c03a9b4e77	Remove embedded OAuth implementation and flatten directory structure ... Simplified the repository to have a single OAuth pattern with separate auth and MCP servers at the top level. Preserved embedded OAuth documentation as an alternative pattern.	2025-10-06 21:30:14 -04:00
Basil Hosmer	112997d352	refactor, improve docs	2025-10-05 23:51:06 -04:00
Basil Hosmer	4a081bc816	Improve e2e tests with OAuth flow validation ... Add state parameter round-trip validation to prevent CSRF attacks. Document each OAuth step including PKCE generation and token exchange. Kill existing servers before starting new ones to avoid conflicts.	2025-09-15 02:11:23 -04:00
Basil Hosmer	40773bd051	Add end-to-end verification scripts and fix server issues ... - Fix server hanging issue: incomplete HTTP responses in shttp.ts - Add proper JSON-RPC error responses per MCP specification - Fix PKCE challenge encoding: use base64url not standard base64 - Add comprehensive e2e scripts with OAuth flow and feature testing: - scripts/test-integrated-e2e.sh: Tests integrated mode - scripts/test-separate-e2e.sh: Tests separate mode - Scripts verify all README claims: 7 tools, 100 resources (paginated), 3 prompts - Add environment variable support and prerequisite checking - Add TODO documentation for Streamable HTTP implementation choices - Update README with table of contents and scripts documentation - Update project structure to include scripts directory Scripts successfully verify: ✅ Complete OAuth 2.0 + PKCE flows in both modes ✅ Token introspection and cross-server session management ✅ All MCP features working correctly ✅ README accuracy (tool/resource counts verified programmatically)	2025-09-11 23:52:39 -04:00