Allen Zhou
|
b30a77e1b9
|
Update types.ts
|
2025-04-14 10:10:57 -07:00 |
|
Allen Zhou
|
ab3bb94290
|
Adjust arbitrary keys to custom claims field to prevent conflicts
|
2025-04-14 10:10:08 -07:00 |
|
Allen Zhou
|
23188ec446
|
Add custom claims to authinfo
|
2025-04-12 18:06:46 -07:00 |
|
Justin Spahr-Summers
|
9980cbf438
|
Merge pull request #194 from davolokh/console-error-in-test-removed
console.error pollution logs removed in tests
|
2025-04-07 11:07:02 +01:00 |
|
Dmitry Volokh
|
fee4bbec58
|
console.error pollution removed in tests
|
2025-03-14 19:54:03 +01:00 |
|
Allen Zhou
|
b90192a020
|
Add skipLocalPkceValidation param and create providers folder
|
2025-02-28 13:59:23 -08:00 |
|
Allen Zhou
|
8d7b387545
|
Clean up pkce skip check for proxy providers
|
2025-02-27 13:35:40 -08:00 |
|
Allen Zhou
|
89c4ec3272
|
Add baseUrl param to override issuerUrl for fallback construction
|
2025-02-27 10:45:17 -08:00 |
|
Allen Zhou
|
d93814f4df
|
Merge branch 'main' into server-authorization-proxy
|
2025-02-26 14:00:48 -08:00 |
|
Allen Zhou
|
57f59c69a1
|
Make authorizationUrl and tokenUrl mandatory
|
2025-02-26 14:00:34 -08:00 |
|
Allen Zhou
|
96f3d81aa3
|
Adjust function types to be accessible to subclasses
|
2025-02-25 15:29:20 -08:00 |
|
Allen Zhou
|
aa5690b182
|
Zod parsing for registration response
|
2025-02-24 20:17:08 -08:00 |
|
Allen Zhou
|
c7ce1a29c5
|
improve proxy code verifier test naming
|
2025-02-24 17:43:16 -08:00 |
|
Allen Zhou
|
cb8135840c
|
Change verifyToken to match parent interface name
|
2025-02-24 17:39:50 -08:00 |
|
Allen Zhou
|
476c11149b
|
Add Proxy Provider test
|
2025-02-24 17:10:37 -08:00 |
|
Allen Zhou
|
996822f18d
|
Test if code verifier is passed through to upstream proxy
|
2025-02-24 16:56:13 -08:00 |
|
Allen Zhou
|
9e32fd5464
|
Only send client secret and code verifier if defined
|
2025-02-24 16:55:36 -08:00 |
|
Allen Zhou
|
7f03f13072
|
Add ProxyOAuthServerProvider
|
2025-02-24 16:07:54 -08:00 |
|
Jerome
|
885590c099
|
Fixing tests
|
2025-02-24 13:39:58 +00:00 |
|
Jerome
|
aad2badb2f
|
Removed nested ternaries
|
2025-02-24 10:26:59 +00:00 |
|
Jerome
|
3b12961e2e
|
Added tests
|
2025-02-23 14:55:30 +00:00 |
|
Jerome
|
8a222e8b38
|
Don't set client secret expiry if public client
|
2025-02-23 10:59:05 +00:00 |
|
Jerome
|
2dc7fa5df8
|
Check token expiry in bearer auth
|
2025-02-23 10:57:26 +00:00 |
|
Justin Spahr-Summers
|
f0777d2d1f
|
Client secrets should not be removed, but expiry checked in middleware
|
2025-02-21 12:11:51 +00:00 |
|
Justin Spahr-Summers
|
094b81f70d
|
Throw error if scopes are requested and client has none
|
2025-02-21 11:55:46 +00:00 |
|
Justin Spahr-Summers
|
fadcee3f14
|
Remove tests that are just testing a mock
|
2025-02-21 11:48:46 +00:00 |
|
Justin Spahr-Summers
|
b8b816ca9f
|
Bearer auth middleware
|
2025-02-18 16:09:51 +00:00 |
|
Justin Spahr-Summers
|
c8f4d621a9
|
Render /authorize errors as JSON
|
2025-02-18 15:06:54 +00:00 |
|
Justin Spahr-Summers
|
7fb8e4a099
|
Catch and format standard error types in responses
|
2025-02-18 15:01:29 +00:00 |
|
Justin Spahr-Summers
|
57fe3b3fb0
|
Use standard error types in middleware
|
2025-02-18 14:18:13 +00:00 |
|
Justin Spahr-Summers
|
1dfb9aa709
|
Classes for standard OAuth error types
|
2025-02-18 14:15:47 +00:00 |
|
Justin Spahr-Summers
|
63db32236e
|
Set Cache-Control: no-store
|
2025-02-18 14:08:07 +00:00 |
|
Justin Spahr-Summers
|
7b81b4f672
|
Handle POST bodies in /authorize
|
2025-02-18 13:55:20 +00:00 |
|
Justin Spahr-Summers
|
85e3cadc6f
|
Fix Request type extension to not use namespacing
|
2025-02-18 13:18:50 +00:00 |
|
Justin Spahr-Summers
|
5d7bc7a035
|
Fix unused variable lint
|
2025-02-18 13:18:03 +00:00 |
|
Justin Spahr-Summers
|
8d62612479
|
Extract middleware for 405 Method Not Allowed
|
2025-02-18 13:13:05 +00:00 |
|
Justin Spahr-Summers
|
07e8ce9cd1
|
Fix router test after metadata key removed
|
2025-02-18 13:12:50 +00:00 |
|
Justin Spahr-Summers
|
48cddd9488
|
Pass through rate limits and other options cleanly from router
|
2025-02-18 11:25:42 +00:00 |
|
Justin Spahr-Summers
|
1415c2db92
|
Rate limiting on individual handlers
|
2025-02-18 11:21:07 +00:00 |
|
Justin Spahr-Summers
|
36f9c6b260
|
Get tests passing
|
2025-02-18 11:00:46 +00:00 |
|
Justin Spahr-Summers
|
76938c77e8
|
Claude-authored tests
|
2025-02-18 10:57:24 +00:00 |
|
Justin Spahr-Summers
|
76b9781c85
|
Use URL.canParse instead of custom isValidUrl
|
2025-02-18 10:33:21 +00:00 |
|
Justin Spahr-Summers
|
f292b12eec
|
Remove generateToken until needed
|
2025-02-18 10:20:33 +00:00 |
|
Justin Spahr-Summers
|
bb49189bdf
|
Router for all MCP auth endpoints + behaviors
|
2025-02-18 10:16:32 +00:00 |
|
Justin Spahr-Summers
|
a6e78b7426
|
Add handler for auth server metadata
|
2025-02-18 09:52:45 +00:00 |
|
Justin Spahr-Summers
|
43f433c934
|
Match style for registration request handler
|
2025-02-18 09:47:11 +00:00 |
|
Justin Spahr-Summers
|
6830c92f76
|
Remove redundant comment
|
2025-02-18 09:45:19 +00:00 |
|
Justin Spahr-Summers
|
bff65e6746
|
Add client information to all OAuth provider methods
|
2025-02-18 09:44:25 +00:00 |
|
Justin Spahr-Summers
|
9abcccf2ed
|
Token revocation endpoint
|
2025-02-18 09:41:35 +00:00 |
|
Justin Spahr-Summers
|
19f2ac7018
|
Extract client authentication into reusable middleware
|
2025-02-18 09:39:52 +00:00 |
|