e3f4b88768* Add Middleware handlers to StreamableHttpTransport * OAuth Implementation based on middleware * OAuth Implementation based on middleware * Add Middleware handlers to StreamableHttpTransport * OAuth Implementation based on middleware * OAuth Implementation based on middleware Signed-off-by: Volodymyr Panivko <sveneld300@gmail.com> * Address PR review feedback for OAuth middleware * Apply php-cs-fixer to satisfy QA * Use Mcp exception classes in OAuth middleware * Refactor OAuth HTTP stack and add Microsoft example policies * Fix QA PHPStan findings in OAuth examples and auth middleware * Require OIDC discovery in JWKS provider and refine OAuth proxy behavior * Remove local development docker artifacts from VCS * Revert .gitignore changes for local docker files * Fix body retrieval in OAuthRequestMetaMiddleware for proper string conversion Signed-off-by: Volodymyr Panivko <sveneld300@gmail.com> * Address OAuth PR review feedback and align example configs * Fix QA style issues and add authorization docs * Fix PHPStan typing issues in OAuth middleware * Remove duplicate Middleware namespace, consolidate under Http\Middleware Remove old Mcp\Server\Transport\Middleware\ classes that were duplicated in Mcp\Server\Transport\Http\Middleware\ and Http\OAuth\. Update docs to reference the correct namespaces. * Address PR review: replace Throwable catch with specific exceptions, add JSON_THROW_ON_ERROR - JwtTokenValidator: replace catch(\Throwable) with explicit \InvalidArgumentException|\UnexpectedValueException|\DomainException, letting RuntimeException from JwksProvider propagate as infrastructure errors - OAuthProxyMiddleware: add \JSON_THROW_ON_ERROR to json_encode for metadata response - Update tests to expect RuntimeException for JWKS infrastructure failures --------- Signed-off-by: Volodymyr Panivko <sveneld300@gmail.com> Co-authored-by: Volodymyr Panivko <volodymyr.panivko@togethernetworks.com>
64 lines
2.1 KiB
PHP
64 lines
2.1 KiB
PHP
<?php
|
|
|
|
/*
|
|
* This file is part of the official PHP MCP SDK.
|
|
*
|
|
* A collaboration between Symfony and the PHP Foundation.
|
|
*
|
|
* For the full copyright and license information, please view the LICENSE
|
|
* file that was distributed with this source code.
|
|
*/
|
|
|
|
namespace Mcp\Example\Server\OAuthMicrosoft\Tests\Unit;
|
|
|
|
use Mcp\Example\Server\OAuthMicrosoft\MicrosoftOidcMetadataPolicy;
|
|
use PHPUnit\Framework\Attributes\TestDox;
|
|
use PHPUnit\Framework\TestCase;
|
|
|
|
/**
|
|
* Tests MicrosoftOidcMetadataPolicy validation behavior.
|
|
*
|
|
* @author Volodymyr Panivko <sveneld300@gmail.com>
|
|
*/
|
|
class MicrosoftOidcMetadataPolicyTest extends TestCase
|
|
{
|
|
#[TestDox('metadata without code challenge methods is accepted')]
|
|
public function testMissingCodeChallengeMethodsIsAccepted(): void
|
|
{
|
|
$policy = new MicrosoftOidcMetadataPolicy();
|
|
$metadata = [
|
|
'authorization_endpoint' => 'https://auth.example.com/authorize',
|
|
'token_endpoint' => 'https://auth.example.com/token',
|
|
'jwks_uri' => 'https://auth.example.com/jwks',
|
|
];
|
|
|
|
$this->assertTrue($policy->isValid($metadata));
|
|
}
|
|
|
|
#[TestDox('malformed code challenge methods are ignored for validity')]
|
|
public function testMalformedCodeChallengeMethodsSupportedIsAccepted(): void
|
|
{
|
|
$policy = new MicrosoftOidcMetadataPolicy();
|
|
$metadata = [
|
|
'authorization_endpoint' => 'https://auth.example.com/authorize',
|
|
'token_endpoint' => 'https://auth.example.com/token',
|
|
'jwks_uri' => 'https://auth.example.com/jwks',
|
|
'code_challenge_methods_supported' => 'S256',
|
|
];
|
|
|
|
$this->assertTrue($policy->isValid($metadata));
|
|
}
|
|
|
|
#[TestDox('required endpoint fields still enforce validity')]
|
|
public function testIsValidRequiresCoreEndpoints(): void
|
|
{
|
|
$policy = new MicrosoftOidcMetadataPolicy();
|
|
$metadata = [
|
|
'authorization_endpoint' => 'https://auth.example.com/authorize',
|
|
// token_endpoint missing
|
|
'jwks_uri' => 'https://auth.example.com/jwks',
|
|
];
|
|
|
|
$this->assertFalse($policy->isValid($metadata));
|
|
}
|
|
}
|