modelcontextprotocol/typescript-sdk
Watch
1
0
Fork
You've already forked typescript-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Don't set client secret expiry if public client

Browse source
This commit is contained in:
Jerome 2025-02-23 10:59:05 +00:00
commit 8a222e8b38
No known key found for this signature in database
1 changed files with 7 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

9
src/server/auth/handlers/register.ts
View file

@ -75,10 +75,11 @@ export function clientRegistrationHandler({
}
const clientMetadata = parseResult.data;
const isPublicClient = clientMetadata.token_endpoint_auth_method !== 'none'
// Generate client credentials
const clientId = crypto.randomUUID();
const clientSecret = clientMetadata.token_endpoint_auth_method !== 'none'
const clientSecret = isPublicClient
? crypto.randomBytes(32).toString('hex')
: undefined;
const clientIdIssuedAt = Math.floor(Date.now() / 1000);
@ -88,7 +89,11 @@ export function clientRegistrationHandler({
client_id: clientId,
client_secret: clientSecret,
client_id_issued_at: clientIdIssuedAt,
client_secret_expires_at: clientSecretExpirySeconds > 0 ? clientIdIssuedAt + clientSecretExpirySeconds : 0
client_secret_expires_at: isPublicClient
? clientSecretExpirySeconds > 0
? clientIdIssuedAt + clientSecretExpirySeconds
: 0
: undefined,
};
clientInfo = await clientsStore.registerClient!(clientInfo);