5de4e911e3Adds enterprise-managed authorization (EMA): browser-side IdP login + RFC 8693 token-exchange and JWT-bearer resource-token mint, per-server EMA opt-in in Server Settings, IdP config in Client Settings, and IdP clientSecret keychain storage. Includes the v2/main merge and review follow-ups (400 on malformed client config; normalizeIdpIssuer import consolidation).
17 lines
770 B
TypeScript
17 lines
770 B
TypeScript
/**
|
|
* Field identifiers for the per-server values held in the OS keychain.
|
|
*
|
|
* Pure constants — kept out of `core/auth/node/` so the converter in
|
|
* `core/mcp/serverList.ts` (browser-safe) and the Node-only keychain
|
|
* backend in `core/auth/node/secret-store.ts` agree on the spelling
|
|
* without dragging the native binding import into browser code.
|
|
*/
|
|
|
|
/** Field name for an entry's OAuth client secret. */
|
|
export const SECRET_FIELD_OAUTH_CLIENT_SECRET = "oauth-client-secret";
|
|
|
|
/** Field name for the install-level enterprise IdP OIDC client secret (client.json). */
|
|
export const SECRET_FIELD_IDP_CLIENT_SECRET = "idp-client-secret";
|
|
|
|
/** Field name for one stdio env-variable value. */
|
|
export const envSecretField = (envKey: string): string => `env:${envKey}`;
|