e3f4b88768* Add Middleware handlers to StreamableHttpTransport * OAuth Implementation based on middleware * OAuth Implementation based on middleware * Add Middleware handlers to StreamableHttpTransport * OAuth Implementation based on middleware * OAuth Implementation based on middleware Signed-off-by: Volodymyr Panivko <sveneld300@gmail.com> * Address PR review feedback for OAuth middleware * Apply php-cs-fixer to satisfy QA * Use Mcp exception classes in OAuth middleware * Refactor OAuth HTTP stack and add Microsoft example policies * Fix QA PHPStan findings in OAuth examples and auth middleware * Require OIDC discovery in JWKS provider and refine OAuth proxy behavior * Remove local development docker artifacts from VCS * Revert .gitignore changes for local docker files * Fix body retrieval in OAuthRequestMetaMiddleware for proper string conversion Signed-off-by: Volodymyr Panivko <sveneld300@gmail.com> * Address OAuth PR review feedback and align example configs * Fix QA style issues and add authorization docs * Fix PHPStan typing issues in OAuth middleware * Remove duplicate Middleware namespace, consolidate under Http\Middleware Remove old Mcp\Server\Transport\Middleware\ classes that were duplicated in Mcp\Server\Transport\Http\Middleware\ and Http\OAuth\. Update docs to reference the correct namespaces. * Address PR review: replace Throwable catch with specific exceptions, add JSON_THROW_ON_ERROR - JwtTokenValidator: replace catch(\Throwable) with explicit \InvalidArgumentException|\UnexpectedValueException|\DomainException, letting RuntimeException from JwksProvider propagate as infrastructure errors - OAuthProxyMiddleware: add \JSON_THROW_ON_ERROR to json_encode for metadata response - Update tests to expect RuntimeException for JWKS infrastructure failures --------- Signed-off-by: Volodymyr Panivko <sveneld300@gmail.com> Co-authored-by: Volodymyr Panivko <volodymyr.panivko@togethernetworks.com>
18 lines
755 B
Text
18 lines
755 B
Text
# Microsoft Entra ID (Azure AD) Configuration
|
|
# Copy this file to .env and fill in your values
|
|
|
|
# Your Azure AD tenant ID
|
|
# Find at: Azure Portal > Entra ID > Overview > Tenant ID
|
|
AZURE_TENANT_ID=your-tenant-id-here
|
|
|
|
# Application (client) ID for the MCP server app registration
|
|
# This is the audience that tokens must be issued for
|
|
AZURE_CLIENT_ID=your-client-id-here
|
|
|
|
# Client secret for calling Microsoft Graph API (optional)
|
|
# Only needed if your MCP tools call Graph API on behalf of users
|
|
AZURE_CLIENT_SECRET=your-client-secret-here
|
|
|
|
# Optional: Specific API permissions/scopes your MCP server accepts
|
|
# Comma-separated list of custom scopes defined in your app registration
|
|
# MCP_SCOPES=api://your-client-id/mcp.read,api://your-client-id/mcp.write
|