modelcontextprotocol/typescript-sdk
Watch
1
0
Fork
You've already forked typescript-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

feat(server): runtime-neutral requireBearerAuth for web-standard hosts (#2420)

Browse source
This commit is contained in:
Felix Weinberger 2026-07-02 19:35:21 +01:00 • committed by GitHub
commit 7635115d01
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 595 additions and 129 deletions
Download patch file Download diff file Expand all files Collapse all files

12
packages/codemod/src/migrations/v1-to-v2/mappings/importMap.ts
View file

@ -34,8 +34,10 @@ export interface ImportMapping {
}
/**
* Resource-server auth helpers whose maintained v2 home is `@modelcontextprotocol/express`;
* the server-legacy/auth copy they route to by default is a frozen v1 snapshot, so import
* Resource-server auth helpers whose maintained v2 home is `@modelcontextprotocol/express`
* (with the runtime-neutral core — `requireBearerAuth` for web-standard hosts and
* `OAuthTokenVerifier` — also exported from `@modelcontextprotocol/server`); the
* server-legacy/auth copy they route to by default is a frozen v1 snapshot, so import
* and re-export sites get a marker prompting a deliberate re-point.
*/
export const RS_ONLY_AUTH_SYMBOLS: ReadonlySet<string> = new Set([
@ -141,7 +143,8 @@ export const IMPORT_MAP: Record<string, ImportMapping> = {
'@modelcontextprotocol/sdk/server/auth/provider.js': {
target: '@modelcontextprotocol/server-legacy/auth',
status: 'moved',
migrationHint: 'Legacy OAuth AS provider. For RS-only auth, see requireBearerAuth from @modelcontextprotocol/express.'
migrationHint:
'Legacy OAuth AS provider. For RS-only auth, see requireBearerAuth from @modelcontextprotocol/express (or, on web-standard hosts, from @modelcontextprotocol/server).'
},
'@modelcontextprotocol/sdk/server/auth/router.js': {
target: '@modelcontextprotocol/server-legacy/auth',
@ -151,7 +154,8 @@ export const IMPORT_MAP: Record<string, ImportMapping> = {
'@modelcontextprotocol/sdk/server/auth/middleware.js': {
target: '@modelcontextprotocol/server-legacy/auth',
status: 'moved',
migrationHint: 'Legacy OAuth AS middleware. For bearer-only auth, see requireBearerAuth from @modelcontextprotocol/express.'
migrationHint:
'Legacy OAuth AS middleware. For bearer-only auth, see requireBearerAuth from @modelcontextprotocol/express (or, on web-standard hosts, from @modelcontextprotocol/server).'
},
'@modelcontextprotocol/sdk/server/auth/errors.js': {
target: '@modelcontextprotocol/server-legacy/auth',