feat: url based client metadata registration (SEP 991) (#1127)

This commit is contained in:
Matt 2025-11-19 16:44:53 +00:00 • committed by GitHub
commit 7fca1f2b15
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 383 additions and 25 deletions

View file

@ -39,7 +39,7 @@ npx tsx src/examples/client/simpleStreamableHttp.ts
Example client with OAuth:
```bash
npx tsx src/examples/client/simpleOAuthClient.js
npx tsx src/examples/client/simpleOAuthClient.ts <optional-server-url> <optional-client-metadata-url>
```
### Backwards Compatible Client

View file

@ -27,7 +27,10 @@ class InteractiveOAuthClient {
output: process.stdout
});
constructor(private serverUrl: string) {}
constructor(
private serverUrl: string,
private clientMetadataUrl?: string
) {}
/**
* Prompts user for input via readline
@ -155,16 +158,20 @@ class InteractiveOAuthClient {
redirect_uris: [CALLBACK_URL],
grant_types: ['authorization_code', 'refresh_token'],
response_types: ['code'],
token_endpoint_auth_method: 'client_secret_post',
scope: 'mcp:tools'
token_endpoint_auth_method: 'client_secret_post'
};
console.log('🔐 Creating OAuth provider...');
const oauthProvider = new InMemoryOAuthClientProvider(CALLBACK_URL, clientMetadata, (redirectUrl: URL) => {
console.log(`📌 OAuth redirect handler called - opening browser`);
console.log(`Opening browser to: ${redirectUrl.toString()}`);
this.openBrowser(redirectUrl.toString());
});
const oauthProvider = new InMemoryOAuthClientProvider(
CALLBACK_URL,
clientMetadata,
(redirectUrl: URL) => {
console.log(`📌 OAuth redirect handler called - opening browser`);
console.log(`Opening browser to: ${redirectUrl.toString()}`);
this.openBrowser(redirectUrl.toString());
},
this.clientMetadataUrl
);
console.log('🔐 OAuth provider created');
console.log('👤 Creating MCP client...');
@ -327,13 +334,18 @@ class InteractiveOAuthClient {
* Main entry point
*/
async function main(): Promise<void> {
const serverUrl = process.env.MCP_SERVER_URL || DEFAULT_SERVER_URL;
const args = process.argv.slice(2);
const serverUrl = args[0] || DEFAULT_SERVER_URL;
const clientMetadataUrl = args[1];
console.log('🚀 Simple MCP OAuth Client');
console.log(`Connecting to: ${serverUrl}`);
if (clientMetadataUrl) {
console.log(`Client Metadata URL: ${clientMetadataUrl}`);
}
console.log();
const client = new InteractiveOAuthClient(serverUrl);
const client = new InteractiveOAuthClient(serverUrl, clientMetadataUrl);
// Handle graceful shutdown
process.on('SIGINT', () => {

View file

@ -13,7 +13,8 @@ export class InMemoryOAuthClientProvider implements OAuthClientProvider {
constructor(
private readonly _redirectUrl: string | URL,
private readonly _clientMetadata: OAuthClientMetadata,
onRedirect?: (url: URL) => void
onRedirect?: (url: URL) => void,
public readonly clientMetadataUrl?: string
) {
this._onRedirect =
onRedirect ||