modelcontextprotocol/inspector
Watch
1
0
Fork
You've already forked inspector
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

feat(web,core): enterprise-managed authorization (EMA) (#1509) (#1512)

Browse source 
Adds enterprise-managed authorization (EMA): browser-side IdP login + RFC 8693 token-exchange and JWT-bearer resource-token mint, per-server EMA opt-in in Server Settings, IdP config in Client Settings, and IdP clientSecret keychain storage. Includes the v2/main merge and review follow-ups (400 on malformed client config; normalizeIdpIssuer import consolidation).
This commit is contained in:
Bob Dickinson 2026-06-24 19:15:12 -07:00 • committed by GitHub
commit 5de4e911e3
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 7585 additions and 595 deletions
Download patch file Download diff file Expand all files Collapse all files

26
clients/web/src/components/groups/ServerSettingsModal/ServerSettingsModal.tsx
View file

@ -3,24 +3,30 @@ import { CloseButton, Group, Modal, Stack, Title } from "@mantine/core";
import type {
InspectorServerSettings,
OAuthSettings,
ServerType,
} from "@inspector/core/mcp/types.js";
import { isOAuthCapableServerType } from "@inspector/core/mcp/config.js";
import { ListToggle } from "../../elements/ListToggle/ListToggle";
import {
ServerSettingsForm,
type ServerSettingsSection,
} from "../ServerSettingsForm/ServerSettingsForm";
// The "environment" section only renders for stdio servers, so it joins the
// expand/collapse-all set only then — otherwise `allExpanded` could never be
// reached (the section isn't in the DOM to expand).
function allSectionsFor(isStdio: boolean): ServerSettingsSection[] {
// The "environment" section only renders for stdio servers and the "oauth"
// section only for OAuth-capable transports, so each joins the
// expand/collapse-all set only when present — otherwise `allExpanded` could
// never be reached (a section not in the DOM can't be expanded).
function allSectionsFor(
serverType: ServerType,
isStdio: boolean,
): ServerSettingsSection[] {
return [
"options",
...(isStdio ? (["environment"] as const) : []),
"headers",
"metadata",
"timeouts",
"oauth",
...(isOAuthCapableServerType(serverType) ? (["oauth"] as const) : []),
"roots",
];
}
@ -28,6 +34,7 @@ function allSectionsFor(isStdio: boolean): ServerSettingsSection[] {
export interface ServerSettingsModalProps {
opened: boolean;
settings: InspectorServerSettings;
serverType: ServerType;
/**
* Whether the target server uses the stdio transport. Forwarded to the form
* to gate the stdio-only Working Directory field and Environment Variables
@ -41,10 +48,12 @@ export interface ServerSettingsModalProps {
export function ServerSettingsModal({
opened,
settings,
serverType,
isStdio,
onClose,
onSettingsChange,
}: ServerSettingsModalProps) {
const sections = allSectionsFor(serverType, isStdio);
// Initial expansion is the first ("options") section — where Network Log
// Size lives, so a deep-link from the body-dropped toast lands on the
// relevant control. The parent remounts this modal per open (via `key`), so
@ -54,11 +63,10 @@ export function ServerSettingsModal({
ServerSettingsSection[]
>(["options"]);
const allSections = allSectionsFor(isStdio);
const allExpanded = expandedSections.length === allSections.length;
const allExpanded = expandedSections.length === sections.length;
function handleToggleAll() {
setExpandedSections(allExpanded ? [] : allSections);
setExpandedSections(allExpanded ? [] : sections);
}
function handleAddHeader() {
@ -139,6 +147,7 @@ export function ServerSettingsModal({
oauthClientId: oauth.clientId,
oauthClientSecret: oauth.clientSecret,
oauthScopes: oauth.scopes,
enterpriseManaged: oauth.enterpriseManaged ? true : undefined,
});
}
@ -195,6 +204,7 @@ export function ServerSettingsModal({
</Group>
<ServerSettingsForm
settings={settings}
serverType={serverType}
isStdio={isStdio}
expandedSections={expandedSections}
onExpandedSectionsChange={setExpandedSections}