694a4d8879Fixes #96 ## Motivation and Context See #96 ## How Has This Been Tested? Has some unit and integration tests, still needs proper testing of the different registry types ## Breaking Changes Yes, new package uploads will need extra verification ## Types of changes <!-- What types of changes does your code introduce? Put an `x` in all the boxes that apply: --> - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds functionality) - [x] Breaking change (fix or feature that would cause existing functionality to change) - [ ] Documentation update
67 lines
2.1 KiB
Go
67 lines
2.1 KiB
Go
package registries
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"io"
|
|
"net/http"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/modelcontextprotocol/registry/pkg/model"
|
|
)
|
|
|
|
// ValidateNuGet validates that a NuGet package contains the correct MCP server name
|
|
func ValidateNuGet(ctx context.Context, pkg model.Package, serverName string) error {
|
|
// Set default registry base URL if empty
|
|
if pkg.RegistryBaseURL == "" {
|
|
pkg.RegistryBaseURL = model.RegistryURLNuGet
|
|
}
|
|
|
|
// Validate that the registry base URL matches NuGet exactly
|
|
if pkg.RegistryBaseURL != model.RegistryURLNuGet {
|
|
return fmt.Errorf("registry type and base URL do not match: '%s' is not valid for registry type '%s'. Expected: %s",
|
|
pkg.RegistryBaseURL, model.RegistryTypeNuGet, model.RegistryURLNuGet)
|
|
}
|
|
|
|
client := &http.Client{Timeout: 10 * time.Second}
|
|
|
|
lowerID := strings.ToLower(pkg.Identifier)
|
|
lowerVersion := strings.ToLower(pkg.Version)
|
|
if lowerVersion == "" {
|
|
return fmt.Errorf("NuGet package validation requires a specific version, but none was provided")
|
|
}
|
|
|
|
// Try to get README from the package
|
|
readmeURL := fmt.Sprintf("%s/v3-flatcontainer/%s/%s/readme", pkg.RegistryBaseURL, lowerID, lowerVersion)
|
|
req, err := http.NewRequestWithContext(ctx, http.MethodGet, readmeURL, nil)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to create request: %w", err)
|
|
}
|
|
|
|
req.Header.Set("User-Agent", "MCP-Registry-Validator/1.0")
|
|
|
|
resp, err := client.Do(req)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to fetch README from NuGet: %w", err)
|
|
}
|
|
defer resp.Body.Close()
|
|
|
|
if resp.StatusCode == http.StatusOK {
|
|
// Check README content
|
|
readmeBytes, err := io.ReadAll(resp.Body)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to read README content: %w", err)
|
|
}
|
|
|
|
readmeContent := string(readmeBytes)
|
|
|
|
// Check for mcp-name: format (more specific)
|
|
mcpNamePattern := "mcp-name: " + serverName
|
|
if strings.Contains(readmeContent, mcpNamePattern) {
|
|
return nil // Found as mcp-name: format
|
|
}
|
|
}
|
|
|
|
return fmt.Errorf("NuGet package '%s' ownership validation failed. The server name '%s' must appear as 'mcp-name: %s' in the package README. Add it to your package README", pkg.Identifier, serverName, serverName)
|
|
}
|