c733cedaf8Fixes #264. Adds endpoints: ``` /v0/auth/github # exchange a github token for a registry token that gives you access to namespaces io.github.username and io.github.org for your orgs /v0/auth/none # get a registry token for namespace io.modelcontextprotocol.anonymous (only for testing/local dev purposes) ``` Updates `/v0/publish` to accept one of these registry tokens. ## Motivation and Context See #264 ## How Has This Been Tested? - Running locally and getting a token from `/v0/auth/none` and then publishing to `/v0/publish` - Updating the integration tests that get a token and then publish, and them passing ## Breaking Changes This is a breaking change to the auth API. This is fine for registry given it's not deployed yet. ## Types of changes <!-- What types of changes does your code introduce? Put an `x` in all the boxes that apply: --> - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds functionality) - [x] Breaking change (fix or feature that would cause existing functionality to change) - [x] Documentation update ## Checklist <!-- Go over all the following points, and put an `x` in all the boxes that apply. --> - [x] I have read the [MCP Documentation](https://modelcontextprotocol.io) - [x] My code follows the repository's style guidelines - [x] New and existing tests pass locally - [x] I have added appropriate error handling - [x] I have added or updated documentation as needed ## Additional context <!-- Add any other context, implementation notes, or design decisions --> --------- Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com> Co-authored-by: adam jones <domdomegg@users.noreply.github.com>
51 lines
1.5 KiB
Go
51 lines
1.5 KiB
Go
package auth_test
|
|
|
|
import (
|
|
"context"
|
|
"crypto/ed25519"
|
|
"crypto/rand"
|
|
"encoding/hex"
|
|
"testing"
|
|
|
|
v0auth "github.com/modelcontextprotocol/registry/internal/api/handlers/v0/auth"
|
|
"github.com/modelcontextprotocol/registry/internal/auth"
|
|
"github.com/modelcontextprotocol/registry/internal/config"
|
|
"github.com/modelcontextprotocol/registry/internal/model"
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestNoneHandler_GetAnonymousToken(t *testing.T) {
|
|
// Generate a proper Ed25519 seed for testing
|
|
testSeed := make([]byte, ed25519.SeedSize)
|
|
_, err := rand.Read(testSeed)
|
|
require.NoError(t, err)
|
|
|
|
cfg := &config.Config{
|
|
JWTPrivateKey: hex.EncodeToString(testSeed),
|
|
EnableAnonymousAuth: true,
|
|
}
|
|
|
|
handler := v0auth.NewNoneHandler(cfg)
|
|
ctx := context.Background()
|
|
|
|
// Test getting anonymous token
|
|
tokenResponse, err := handler.GetAnonymousToken(ctx)
|
|
require.NoError(t, err)
|
|
assert.NotEmpty(t, tokenResponse.RegistryToken)
|
|
assert.Greater(t, tokenResponse.ExpiresAt, 0)
|
|
|
|
// Validate the token claims
|
|
jwtManager := auth.NewJWTManager(cfg)
|
|
claims, err := jwtManager.ValidateToken(ctx, tokenResponse.RegistryToken)
|
|
require.NoError(t, err)
|
|
|
|
// Check auth method
|
|
assert.Equal(t, model.AuthMethodNone, claims.AuthMethod)
|
|
assert.Equal(t, "anonymous", claims.AuthMethodSubject)
|
|
|
|
// Check permissions
|
|
require.Len(t, claims.Permissions, 1)
|
|
assert.Equal(t, auth.PermissionActionPublish, claims.Permissions[0].Action)
|
|
assert.Equal(t, "io.modelcontextprotocol.anonymous/*", claims.Permissions[0].ResourcePattern)
|
|
}
|