modelcontextprotocol/typescript-sdk
Watch
1
0
Fork
You've already forked typescript-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Validate auth flow is supported

Browse source
This commit is contained in:
Justin Spahr-Summers 2025-02-06 14:39:50 +00:00
commit 8a26e2d9e8
No known key found for this signature in database
1 changed files with 29 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

35
src/client/auth/auth.ts
View file

@ -70,14 +70,37 @@ export async function startAuthorization(
const codeVerifier = challenge.code_verifier;
const codeChallenge = challenge.code_challenge;
const authorizationUrl = metadata?.authorization_endpoint
? new URL(metadata?.authorization_endpoint)
: new URL("/authorize", serverUrl);
const responseType = "code";
const codeChallengeMethod = "S256";
// TODO: Validate that these parameters are listed as supported in the metadata, if present.
authorizationUrl.searchParams.set("response_type", "code");
let authorizationUrl: URL;
if (metadata) {
authorizationUrl = new URL(metadata.authorization_endpoint);
if (!(responseType in metadata.response_types_supported)) {
throw new Error(
`Incompatible auth server: does not support response type ${responseType}`,
);
}
if (
!metadata.code_challenge_methods_supported ||
!(codeChallengeMethod in metadata.code_challenge_methods_supported)
) {
throw new Error(
`Incompatible auth server: does not support code challenge method ${codeChallengeMethod}`,
);
}
} else {
authorizationUrl = new URL("/authorize", serverUrl);
}
authorizationUrl.searchParams.set("response_type", responseType);
authorizationUrl.searchParams.set("code_challenge", codeChallenge);
authorizationUrl.searchParams.set("code_challenge_method", "S256");
authorizationUrl.searchParams.set(
"code_challenge_method",
codeChallengeMethod,
);
authorizationUrl.searchParams.set("redirect_uri", String(redirectUrl));
return { authorizationUrl, codeVerifier };