e3f4b88768* Add Middleware handlers to StreamableHttpTransport * OAuth Implementation based on middleware * OAuth Implementation based on middleware * Add Middleware handlers to StreamableHttpTransport * OAuth Implementation based on middleware * OAuth Implementation based on middleware Signed-off-by: Volodymyr Panivko <sveneld300@gmail.com> * Address PR review feedback for OAuth middleware * Apply php-cs-fixer to satisfy QA * Use Mcp exception classes in OAuth middleware * Refactor OAuth HTTP stack and add Microsoft example policies * Fix QA PHPStan findings in OAuth examples and auth middleware * Require OIDC discovery in JWKS provider and refine OAuth proxy behavior * Remove local development docker artifacts from VCS * Revert .gitignore changes for local docker files * Fix body retrieval in OAuthRequestMetaMiddleware for proper string conversion Signed-off-by: Volodymyr Panivko <sveneld300@gmail.com> * Address OAuth PR review feedback and align example configs * Fix QA style issues and add authorization docs * Fix PHPStan typing issues in OAuth middleware * Remove duplicate Middleware namespace, consolidate under Http\Middleware Remove old Mcp\Server\Transport\Middleware\ classes that were duplicated in Mcp\Server\Transport\Http\Middleware\ and Http\OAuth\. Update docs to reference the correct namespaces. * Address PR review: replace Throwable catch with specific exceptions, add JSON_THROW_ON_ERROR - JwtTokenValidator: replace catch(\Throwable) with explicit \InvalidArgumentException|\UnexpectedValueException|\DomainException, letting RuntimeException from JwksProvider propagate as infrastructure errors - OAuthProxyMiddleware: add \JSON_THROW_ON_ERROR to json_encode for metadata response - Update tests to expect RuntimeException for JWKS infrastructure failures --------- Signed-off-by: Volodymyr Panivko <sveneld300@gmail.com> Co-authored-by: Volodymyr Panivko <volodymyr.panivko@togethernetworks.com>
79 lines
2.8 KiB
PHP
79 lines
2.8 KiB
PHP
<?php
|
|
|
|
/*
|
|
* This file is part of the official PHP MCP SDK.
|
|
*
|
|
* A collaboration between Symfony and the PHP Foundation.
|
|
*
|
|
* For the full copyright and license information, please view the LICENSE
|
|
* file that was distributed with this source code.
|
|
*/
|
|
|
|
namespace Mcp\Tests\Unit\Server\Transport\Http\OAuth;
|
|
|
|
use Mcp\Server\Transport\Http\OAuth\StrictOidcDiscoveryMetadataPolicy;
|
|
use PHPUnit\Framework\Attributes\TestDox;
|
|
use PHPUnit\Framework\TestCase;
|
|
|
|
/**
|
|
* Tests StrictOidcDiscoveryMetadataPolicy validation behavior.
|
|
*
|
|
* @author Volodymyr Panivko <sveneld300@gmail.com>
|
|
*/
|
|
class StrictOidcDiscoveryMetadataPolicyTest extends TestCase
|
|
{
|
|
#[TestDox('metadata without code challenge methods is invalid in strict mode')]
|
|
public function testMissingCodeChallengeMethodsIsInvalid(): void
|
|
{
|
|
$policy = new StrictOidcDiscoveryMetadataPolicy();
|
|
$metadata = [
|
|
'authorization_endpoint' => 'https://auth.example.com/authorize',
|
|
'token_endpoint' => 'https://auth.example.com/token',
|
|
'jwks_uri' => 'https://auth.example.com/jwks',
|
|
];
|
|
|
|
$this->assertFalse($policy->isValid($metadata));
|
|
}
|
|
|
|
#[TestDox('valid code challenge methods list is accepted in strict mode')]
|
|
public function testValidCodeChallengeMethodsIsAccepted(): void
|
|
{
|
|
$policy = new StrictOidcDiscoveryMetadataPolicy();
|
|
$metadata = [
|
|
'authorization_endpoint' => 'https://auth.example.com/authorize',
|
|
'token_endpoint' => 'https://auth.example.com/token',
|
|
'jwks_uri' => 'https://auth.example.com/jwks',
|
|
'code_challenge_methods_supported' => ['S256'],
|
|
];
|
|
|
|
$this->assertTrue($policy->isValid($metadata));
|
|
}
|
|
|
|
#[TestDox('empty code challenge methods list is invalid in strict mode')]
|
|
public function testEmptyCodeChallengeMethodsIsInvalid(): void
|
|
{
|
|
$policy = new StrictOidcDiscoveryMetadataPolicy();
|
|
$metadata = [
|
|
'authorization_endpoint' => 'https://auth.example.com/authorize',
|
|
'token_endpoint' => 'https://auth.example.com/token',
|
|
'jwks_uri' => 'https://auth.example.com/jwks',
|
|
'code_challenge_methods_supported' => [],
|
|
];
|
|
|
|
$this->assertFalse($policy->isValid($metadata));
|
|
}
|
|
|
|
#[TestDox('non string code challenge method is invalid in strict mode')]
|
|
public function testNonStringCodeChallengeMethodIsInvalid(): void
|
|
{
|
|
$policy = new StrictOidcDiscoveryMetadataPolicy();
|
|
$metadata = [
|
|
'authorization_endpoint' => 'https://auth.example.com/authorize',
|
|
'token_endpoint' => 'https://auth.example.com/token',
|
|
'jwks_uri' => 'https://auth.example.com/jwks',
|
|
'code_challenge_methods_supported' => ['S256', 123],
|
|
];
|
|
|
|
$this->assertFalse($policy->isValid($metadata));
|
|
}
|
|
}
|