@better-auth/mcp 1.8.0-beta.6 → 1.8.0-beta.8

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import { OAuthOptions, Scope, oauthProvider } from "@better-auth/oauth-provider";
-import { DpopReplayReservations, DpopReplayStore } from "better-auth/oauth2";
+import { DpopReplayReservations, DpopReplayStore, VerifyAccessTokenRequestOptions } from "better-auth/oauth2";
 import { Awaitable } from "@better-auth/core";
 import { JWTPayload, JWTVerifyOptions } from "jose";
 import { BetterAuthOptions } from "better-auth/types";
@@ -38,6 +38,15 @@ interface McpProtectedRequestHandlerOptions {
     proofMaxAgeSeconds?: number;
     signingAlgorithms?: readonly string[];
     replayStore?: DpopReplayStore;
+    /**
+     * Require server-provided nonces in DPoP proofs (RFC 9449 §9). A proof
+     * without a current nonce gets a `401` `use_dpop_nonce` challenge with a
+     * fresh `DPoP-Nonce`, and successful DPoP responses carry the next one.
+     * Responses that carry a nonce are marked `Cache-Control: no-store`. Use
+     * the authorization server's secret to accept the nonces it issues, such
+     * as when the MCP server shares its origin.
+     */
+    nonce?: NonNullable<VerifyAccessTokenRequestOptions["dpop"]>["nonce"];
   };
 }
 /**
@@ -167,6 +176,26 @@ interface RequireMcpAuthOptions {
     proofMaxAgeSeconds?: number;
     signingAlgorithms?: readonly string[];
     replayStore?: DpopReplayStore;
+    /**
+     * Require server-provided nonces in DPoP proofs (RFC 9449 §9). A proof
+     * without a current nonce gets a `401` `use_dpop_nonce` challenge with a
+     * fresh `DPoP-Nonce`, and successful DPoP responses carry the next one.
+     *
+     * Nonces are derived from the auth instance's secret, the same way the
+     * OAuth provider's `dpop.nonce` derives them, so the MCP server accepts
+     * the nonces the provider issues. Pass `secret` only to keep the MCP
+     * server's nonces separate, such as for an MCP server on its own origin.
+     */
+    nonce?: {
+      required: boolean;
+      /**
+       * Seconds a nonce is accepted after it is issued. Defaults to the OAuth
+       * provider's `dpop.nonce.expiresIn`, then to `300`.
+       */
+      expiresIn?: number;
+      /** Defaults to the auth instance's secret. */
+      secret?: string;
+    };
   };
 }
 /**
@@ -192,6 +221,7 @@ export declare const requireMcpAuth: <Auth extends {
   $context: Promise<{
     baseURL: string;
     internalAdapter: DpopReplayReservations;
+    secret?: string;
   }>;
 }>(auth: Auth, handler: (request: Request, accessTokenClaims: JWTPayload) => Awaitable<Response>, opts?: RequireMcpAuthOptions) => (req: Request) => Promise<Response>;
 //#endregion

package/dist/index.mjs

@@ -1,11 +1,8 @@
+import { isLoopbackHost } from "@better-auth/core/utils/host";
 import { createResourceServerChallenge, getIssuer, metadataResponse, oauthProvider } from "@better-auth/oauth-provider";
-import { DPOP_SIGNING_ALGORITHMS, createDpopReplayStore, isInsufficientScopeError, requestToResourceInput, verifyAccessTokenRequest } from "better-auth/oauth2";
+import { withExposedHeaders } from "@better-auth/oauth-provider/internal";
+import { DPOP_NONCE_HEADER, DPOP_SIGNING_ALGORITHMS, createDpopNonce, createDpopReplayStore, getDpopJktFromPayload, isInsufficientScopeError, requestToResourceInput, verifyAccessTokenRequest } from "better-auth/oauth2";
 //#region src/handler.ts
-function isLoopbackHost(hostname) {
-	const ipv4Octets = hostname.split(".");
-	const isIpv4Loopback = ipv4Octets.length === 4 && ipv4Octets[0] === "127" && ipv4Octets.every((octet) => /^\d+$/.test(octet) && Number(octet) <= 255);
-	return hostname === "localhost" || hostname === "[::1]" || isIpv4Loopback;
-}
 /**
 * Validates the canonical protected-resource identifier accepted by MCP.
 *
@@ -25,6 +22,23 @@ function validateMcpResource(resource) {
 	if (url.protocol !== "https:" && !(url.protocol === "http:" && isLoopbackHost(url.hostname))) throw new TypeError("MCP resource URL must use HTTPS, except for localhost or loopback IP development URLs");
 	return resource;
 }
+/**
+* Returns `response` with the next DPoP nonce (RFC 9449 §8.2). The response
+* gets `Cache-Control: no-store`, overriding the handler's policy, because a
+* cached copy would hand clients the nonce after it expires. The headers are copied
+* because a handler's `Response` may have immutable headers.
+*/
+async function withNextDpopNonce(response, secret) {
+	const headers = new Headers(response.headers);
+	headers.set("Cache-Control", "no-store");
+	headers.set(DPOP_NONCE_HEADER, await createDpopNonce({ secret }));
+	headers.set("Access-Control-Expose-Headers", withExposedHeaders(headers.get("access-control-expose-headers"), DPOP_NONCE_HEADER));
+	return new Response(response.body, {
+		status: response.status,
+		statusText: response.statusText,
+		headers
+	});
+}
 function toChallengeResponse(error, resource, opts) {
 	const challenge = createResourceServerChallenge(error, resource, opts);
 	if (!challenge) throw error;
@@ -75,12 +89,15 @@ const createMcpProtectedRequestHandler = (options, handler) => {
 		} catch (error) {
 			return toChallengeResponse(error, resource, resolvedChallengeOptions);
 		}
+		let response;
 		try {
-			return await handler(request, accessTokenClaims);
+			response = await handler(request, accessTokenClaims);
 		} catch (error) {
 			if (isInsufficientScopeError(error)) return toChallengeResponse(error, resource, resolvedChallengeOptions);
 			throw error;
 		}
+		const nonce = options.dpop?.nonce;
+		return nonce?.required && getDpopJktFromPayload(accessTokenClaims) ? withNextDpopNonce(response, nonce.secret) : response;
 	};
 };
 //#endregion
@@ -205,6 +222,10 @@ const mcp = (options) => {
 };
 //#endregion
 //#region src/require-mcp-auth.ts
+/** The OAuth provider's `dpop.nonce.expiresIn`, which `mcp()` passes through. */
+function getProviderNonceExpiresIn(options) {
+	return (options.plugins?.find((plugin) => plugin.id === "oauth-provider"))?.options?.dpop?.nonce?.expiresIn;
+}
 /**
 * Protects an MCP server route handler. Verifies the bearer access token
 * against the authorization server's JWKS (checking signature, issuer,
@@ -226,8 +247,11 @@ const mcp = (options) => {
 const requireMcpAuth = (auth, handler, opts) => {
 	if (opts?.resource !== void 0) validateMcpResource(opts.resource);
 	return async (req) => {
-		const { baseURL, internalAdapter } = await auth.$context;
+		const { baseURL, internalAdapter, secret } = await auth.$context;
 		if (!baseURL) throw new Error("requireMcpAuth requires a resolvable base URL. For dynamic base URLs use `createMcpProtectedRequestHandler` with explicit verification options.");
+		const nonce = opts?.dpop?.nonce;
+		const nonceSecret = nonce?.secret ?? secret;
+		if (nonce?.required && !nonceSecret) throw new Error("requireMcpAuth requires dpop.nonce.secret when the auth context has no secret.");
 		const issuer = opts?.issuer ?? baseURL;
 		const resource = opts?.resource ?? baseURL;
 		const jwksUrl = opts?.jwksUrl ?? `${baseURL}/jwks`;
@@ -242,7 +266,12 @@ const requireMcpAuth = (auth, handler, opts) => {
 			dpop: {
 				proofMaxAgeSeconds: opts?.dpop?.proofMaxAgeSeconds,
 				signingAlgorithms: opts?.dpop?.signingAlgorithms,
-				replayStore: opts?.dpop?.replayStore ?? createDpopReplayStore(internalAdapter)
+				replayStore: opts?.dpop?.replayStore ?? createDpopReplayStore(internalAdapter),
+				nonce: nonce && nonceSecret ? {
+					required: nonce.required,
+					expiresIn: nonce.expiresIn ?? getProviderNonceExpiresIn(auth.options),
+					secret: nonceSecret
+				} : void 0
 			}
 		}, handler)(req);
 	};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@better-auth/mcp",
-  "version": "1.8.0-beta.6",
+  "version": "1.8.0-beta.8",
   "description": "Model Context Protocol (MCP) plugin for Better Auth",
   "type": "module",
   "license": "MIT",
@@ -47,20 +47,20 @@
   },
   "dependencies": {
     "jose": "^6.1.3",
-    "@better-auth/oauth-provider": "^1.8.0-beta.6"
+    "@better-auth/oauth-provider": "^1.8.0-beta.8"
   },
   "devDependencies": {
     "@modelcontextprotocol/client": "2.3.1",
     "@modelcontextprotocol/server": "2.3.1",
     "better-call": "1.4.5",
     "tsdown": "0.23.1",
-    "@better-auth/core": "1.8.0-beta.6",
-    "better-auth": "1.8.0-beta.6"
+    "@better-auth/core": "1.8.0-beta.8",
+    "better-auth": "1.8.0-beta.8"
   },
   "peerDependencies": {
     "better-call": "1.4.5",
-    "@better-auth/core": "^1.8.0-beta.6",
-    "better-auth": "^1.8.0-beta.6"
+    "@better-auth/core": "^1.8.0-beta.8",
+    "better-auth": "^1.8.0-beta.8"
   },
   "scripts": {
     "build": "tsdown",