Cliff Hall
1899d5cc52
Merge branch 'main' into server-authorization-proxy
2025-04-02 19:10:50 -04:00
Cliff Hall
deb2737d0f
Merge branch 'main' into fix-reset-timeout-on-progress
2025-04-02 18:52:22 -04:00
Nathan Arseneau
9f5b4bf00d
Add audio content
2025-04-01 19:01:22 -04:00
Jerome
592c91fc86
Merge pull request #222 from modelcontextprotocol/praboud/redirect-uri-fix
...
Correctly pass redirect_uri to tokens call
2025-03-28 15:51:02 +00:00
Justin Spahr-Summers
c6635d71d6
Fix lints
2025-03-26 10:12:19 +00:00
Peter Raboud
2a2392be26
Correctly pass redirect_uri to tokens call
2025-03-25 14:20:34 -07:00
Allen Zhou
514f5493b0
Merge branch 'main' into server-authorization-proxy
2025-03-17 15:35:51 -07:00
zhibisora
46ae2a17af
Fix test for cross-spawn
2025-03-16 05:15:50 +08:00
zhibisora
d4bf73b06e
Replace native spawn with cross-spawn for improved cross-platform compatibility
2025-03-16 05:00:36 +08:00
Allen Zhou
b90192a020
Add skipLocalPkceValidation param and create providers folder
2025-02-28 13:59:23 -08:00
Jerome
a22092bea2
Merge branch 'main' into add-sessionid-to-context
2025-02-28 11:50:37 +00:00
Allen Zhou
8d7b387545
Clean up pkce skip check for proxy providers
2025-02-27 13:35:40 -08:00
Allen Zhou
89c4ec3272
Add baseUrl param to override issuerUrl for fallback construction
2025-02-27 10:45:17 -08:00
Allen Zhou
d93814f4df
Merge branch 'main' into server-authorization-proxy
2025-02-26 14:00:48 -08:00
Allen Zhou
57f59c69a1
Make authorizationUrl and tokenUrl mandatory
2025-02-26 14:00:34 -08:00
Allen Zhou
96f3d81aa3
Adjust function types to be accessible to subclasses
2025-02-25 15:29:20 -08:00
Jason Victor
c396b4af1d
added test for session id using in memory transport
2025-02-25 17:57:45 -05:00
Jason Victor
57f3b07bb9
docstring
2025-02-25 17:48:14 -05:00
Tuomas
d63324e34e
Fix resetTimeoutOnProgress option not being checked, add test
2025-02-25 11:32:24 -06:00
Tuomas
92da5861f4
Fix resetTimeoutOnProgress option not being checked
2025-02-25 11:30:50 -06:00
Jerome
42b1738d54
Merge pull request #157 from modelcontextprotocol/jerome/fix/no-mcp-header-in-metadata-fetching
...
* Check token expiry in requireAuth middleware
* Gracefully handle cors issues in metadata fetching (experienced due to MCP-Protocol-Version header)
* Don't set client secret expiry for public clients
2025-02-25 09:54:32 +00:00
Jerome
c521710b86
Lint
2025-02-25 09:51:17 +00:00
Allen Zhou
aa5690b182
Zod parsing for registration response
2025-02-24 20:17:08 -08:00
Allen Zhou
c7ce1a29c5
improve proxy code verifier test naming
2025-02-24 17:43:16 -08:00
Allen Zhou
cb8135840c
Change verifyToken to match parent interface name
2025-02-24 17:39:50 -08:00
Allen Zhou
476c11149b
Add Proxy Provider test
2025-02-24 17:10:37 -08:00
Allen Zhou
996822f18d
Test if code verifier is passed through to upstream proxy
2025-02-24 16:56:13 -08:00
Allen Zhou
9e32fd5464
Only send client secret and code verifier if defined
2025-02-24 16:55:36 -08:00
Allen Zhou
7f03f13072
Add ProxyOAuthServerProvider
2025-02-24 16:07:54 -08:00
Justin Spahr-Summers
5c07636405
Merge pull request #152 from Ozamatash/feature/progress-timeout-reset
...
Add timeout reset on progress notifications
2025-02-24 20:54:18 +00:00
Jason Victor
0408fdbb62
put missing comment back
2025-02-24 11:06:34 -05:00
Jerome
8dfa64338e
Fixing up tests
2025-02-24 13:48:24 +00:00
Jerome
885590c099
Fixing tests
2025-02-24 13:39:58 +00:00
Jerome
26b47438c6
Tidy up CORS error catching
2025-02-24 10:39:38 +00:00
Jerome
aad2badb2f
Removed nested ternaries
2025-02-24 10:26:59 +00:00
Jason Victor
44c9bffa85
added session id to request handler extra data
2025-02-23 12:39:15 -05:00
Jerome
3b12961e2e
Added tests
2025-02-23 14:55:30 +00:00
Jerome
8a222e8b38
Don't set client secret expiry if public client
2025-02-23 10:59:05 +00:00
Jerome
2dc7fa5df8
Check token expiry in bearer auth
2025-02-23 10:57:26 +00:00
Jerome
1b8e94ca40
During metadata fetching, try with the MCP header, then without, then return undefined if both fail
2025-02-22 16:20:41 +00:00
Justin Spahr-Summers
f0777d2d1f
Client secrets should not be removed, but expiry checked in middleware
2025-02-21 12:11:51 +00:00
Justin Spahr-Summers
094b81f70d
Throw error if scopes are requested and client has none
2025-02-21 11:55:46 +00:00
Justin Spahr-Summers
fadcee3f14
Remove tests that are just testing a mock
2025-02-21 11:48:46 +00:00
Justin Spahr-Summers
529d017d94
Merge branch 'main' into justin/server-auth
2025-02-21 11:44:57 +00:00
Tuomas
b09240bc10
only return early from progress notification on actual timeout errors
2025-02-20 15:36:57 -06:00
Tuomas
28415d3917
Refactor progress notification timeout handling in protocol
2025-02-19 12:23:16 -06:00
Justin Spahr-Summers
506ae06b03
Merge pull request #150 from disintegrator/zod-to-json-schema-strict-unions
...
fix: drop unresolved union members in zod schemas
2025-02-19 14:26:13 +00:00
Justin Spahr-Summers
b8b816ca9f
Bearer auth middleware
2025-02-18 16:09:51 +00:00
Justin Spahr-Summers
c8f4d621a9
Render /authorize errors as JSON
2025-02-18 15:06:54 +00:00
Justin Spahr-Summers
7fb8e4a099
Catch and format standard error types in responses
2025-02-18 15:01:29 +00:00
