feat(web,core): enterprise-managed authorization (EMA) (#1509) (#1512)

Adds enterprise-managed authorization (EMA): browser-side IdP login + RFC 8693 token-exchange and JWT-bearer resource-token mint, per-server EMA opt-in in Server Settings, IdP config in Client Settings, and IdP clientSecret keychain storage. Includes the v2/main merge and review follow-ups (400 on malformed client config; normalizeIdpIssuer import consolidation).
2026-06-24 19:15:12 -07:00 · 2026-06-24 19:15:12 -07:00 · 5de4e911e3
commit 5de4e911e3
parent 5ee347571f
1 changed files with 7585 additions and 595 deletions
--- a/core/auth/node/secret-store.ts
+++ b/core/auth/node/secret-store.ts
@ -22,6 +22,7 @@ const SERVICE_NAME = "mcp-inspector";

 export {
  SECRET_FIELD_OAUTH_CLIENT_SECRET,
+  SECRET_FIELD_IDP_CLIENT_SECRET,
  envSecretField,
 } from "../secret-fields.js";