2089c5aaa1
- Added authentication service and GitHub OAuth integration. - Introduced new authentication methods and structures in the model. - Updated the API to handle authentication during the publishing process. - Created handlers for starting and checking the status of the OAuth flow. - Enhanced the publish handler to validate authentication credentials. - Updated configuration to include GitHub OAuth settings. - Added tests for the OAuth flow and publishing with authentication. - Updated documentation to reflect changes in the API and authentication process.
98 lines
2.7 KiB
Go
98 lines
2.7 KiB
Go
// Package v0 contains API handlers for version 0 of the API
|
|
package v0
|
|
|
|
import (
|
|
"encoding/json"
|
|
"io"
|
|
"net/http"
|
|
|
|
"github.com/modelcontextprotocol/registry/internal/auth"
|
|
"github.com/modelcontextprotocol/registry/internal/model"
|
|
"github.com/modelcontextprotocol/registry/internal/service"
|
|
)
|
|
|
|
// httpError represents an HTTP error with a message and status code
|
|
type httpError struct {
|
|
msg string
|
|
status int
|
|
}
|
|
|
|
// Error returns the error message
|
|
func (e *httpError) Error() string {
|
|
return e.msg
|
|
}
|
|
|
|
// PublishHandler handles requests to publish new server details to the registry
|
|
func PublishHandler(registry service.RegistryService, authService auth.Service) http.HandlerFunc {
|
|
return func(w http.ResponseWriter, r *http.Request) {
|
|
// Only allow POST method
|
|
if r.Method != http.MethodPost {
|
|
http.Error(w, "Method not allowed", http.StatusMethodNotAllowed)
|
|
return
|
|
}
|
|
|
|
// Read the request body
|
|
body, err := io.ReadAll(r.Body)
|
|
if err != nil {
|
|
http.Error(w, "Error reading request body", http.StatusBadRequest)
|
|
return
|
|
}
|
|
defer r.Body.Close()
|
|
|
|
// Parse request body into PublishRequest struct
|
|
var publishReq model.PublishRequest
|
|
err = json.Unmarshal(body, &publishReq)
|
|
if err != nil {
|
|
http.Error(w, "Invalid request payload: "+err.Error(), http.StatusBadRequest)
|
|
return
|
|
}
|
|
|
|
// Get server details from the request
|
|
serverDetail := publishReq.ServerDetail
|
|
|
|
// Validate required fields
|
|
if serverDetail.Name == "" {
|
|
http.Error(w, "Name is required", http.StatusBadRequest)
|
|
return
|
|
}
|
|
|
|
// Version is required
|
|
if serverDetail.VersionDetail.Version == "" {
|
|
http.Error(w, "Version is required", http.StatusBadRequest)
|
|
return
|
|
}
|
|
|
|
// Validate authentication credentials
|
|
if authService != nil {
|
|
publishReq.Authentication.RepoRef = serverDetail.Name
|
|
valid, err := authService.ValidateAuth(r.Context(), publishReq.Authentication)
|
|
if err != nil {
|
|
if err == auth.ErrAuthRequired {
|
|
http.Error(w, "Authentication is required for publishing", http.StatusUnauthorized)
|
|
return
|
|
}
|
|
http.Error(w, "Authentication failed: "+err.Error(), http.StatusUnauthorized)
|
|
return
|
|
}
|
|
|
|
if !valid {
|
|
http.Error(w, "Invalid authentication credentials", http.StatusUnauthorized)
|
|
return
|
|
}
|
|
}
|
|
|
|
// Call the publish method on the registry service
|
|
err = registry.Publish(&serverDetail)
|
|
if err != nil {
|
|
http.Error(w, "Failed to publish server details: "+err.Error(), http.StatusInternalServerError)
|
|
return
|
|
}
|
|
|
|
w.Header().Set("Content-Type", "application/json")
|
|
w.WriteHeader(http.StatusCreated)
|
|
json.NewEncoder(w).Encode(map[string]string{
|
|
"message": "Server publication successful",
|
|
"id": serverDetail.ID,
|
|
})
|
|
}
|
|
}
|