modelcontextprotocol/typescript-sdk
Watch
1
0
Fork
You've already forked typescript-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Only send client secret and code verifier if defined

Browse source
This commit is contained in:
Allen Zhou 2025-02-24 16:55:36 -08:00
commit 9e32fd5464
1 changed files with 24 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

33
src/server/auth/proxyProvider.ts
View file

@ -66,7 +66,9 @@ export class ProxyOAuthServerProvider implements OAuthServerProvider {
const params = new URLSearchParams();
params.set("token", request.token);
params.set("client_id", client.client_id);
params.set("client_secret", client.client_secret || "");
if (client.client_secret) {
params.set("client_secret", client.client_secret);
}
if (request.token_type_hint) {
params.set("token_type_hint", request.token_type_hint);
}
@ -158,20 +160,30 @@ export class ProxyOAuthServerProvider implements OAuthServerProvider {
if (!tokenUrl) {
throw new Error("No token endpoint configured");
}
const params = new URLSearchParams({
grant_type: "authorization_code",
client_id: client.client_id,
code: authorizationCode,
});
if (client.client_secret) {
params.append("client_secret", client.client_secret);
}
if (codeVerifier) {
params.append("code_verifier", codeVerifier);
}
const response = await fetch(tokenUrl, {
method: "POST",
headers: {
"Content-Type": "application/x-www-form-urlencoded",
},
body: new URLSearchParams({
grant_type: "authorization_code",
client_id: client.client_id,
client_secret: client.client_secret || "",
code: authorizationCode,
code_verifier: codeVerifier || "",
}),
body: params.toString(),
});
if (!response.ok) {
throw new ServerError(`Token exchange failed: ${response.status}`);
}
@ -194,10 +206,13 @@ export class ProxyOAuthServerProvider implements OAuthServerProvider {
const params = new URLSearchParams({
grant_type: "refresh_token",
client_id: client.client_id,
client_secret: client.client_secret || "",
refresh_token: refreshToken,
});
if (client.client_secret) {
params.set("client_secret", client.client_secret);
}
if (scopes?.length) {
params.set("scope", scopes.join(" "));
}