| Filename | Latest commit message | Latest commit date |
|---|---|---|
Co-authored-by: Matt <77928207+mattzcarey@users.noreply.github.com> Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> |
||
| .. | ||
| client.ts | ||
| package.json | ||
| README.md | ||
| server.ts | ||
bearer-auth
Resource-server-only auth: requireBearerAuth from @modelcontextprotocol/express in front of createMcpHandler. The client asserts 401 + WWW-Authenticate without a token, and that the verified authInfo reaches the factory (ctx.authInfo) with
one.
HTTP-only by definition. The full interactive OAuth set lives under ../oauth/ (run headlessly in CI via the demo AS's auto-consent mode).