@better-auth/oauth-provider 1.7.0-beta.5 → 1.7.0-beta.6

package/dist/mcp-CYnz-MXn.mjs

@@ -1,56 +0,0 @@
-import { isAPIError } from "better-auth/api";
-import { verifyAccessToken } from "better-auth/oauth2";
-import { APIError as APIError$1 } from "better-call";
-//#region src/mcp.ts
-/**
-* A request middleware handler that checks and responds with
-* a WWW-Authenticate header for unauthenticated responses.
-*
-* @external
-*/
-const mcpHandler = (verifyOptions, handler, opts) => {
-	return async (req) => {
-		const authorization = req.headers?.get("authorization") ?? void 0;
-		const accessToken = authorization?.startsWith("Bearer ") ? authorization.replace("Bearer ", "") : authorization;
-		try {
-			if (!accessToken?.length) throw new APIError$1("UNAUTHORIZED", { message: "missing authorization header" });
-			return handler(req, await verifyAccessToken(accessToken, verifyOptions));
-		} catch (error) {
-			try {
-				handleMcpErrors(error, verifyOptions.verifyOptions.audience, opts);
-			} catch (err) {
-				if (err instanceof APIError$1) return new Response(err.message, {
-					...err,
-					status: err.statusCode
-				});
-				throw new Error(String(err));
-			}
-			throw new Error(String(error));
-		}
-	};
-};
-/**
-* The following handles all MCP errors and API errors
-*
-* @internal
-*/
-function handleMcpErrors(error, resource, opts) {
-	if (isAPIError(error) && error.status === "UNAUTHORIZED") {
-		const wwwAuthenticateValue = (Array.isArray(resource) ? resource : [resource]).map((v) => {
-			let audiencePath;
-			if (URL.canParse?.(v)) {
-				const url = new URL(v);
-				audiencePath = url.pathname.endsWith("/") ? url.pathname.slice(0, -1) : url.pathname;
-				return `Bearer resource_metadata="${url.origin}/.well-known/oauth-protected-resource${audiencePath}"`;
-			} else {
-				const resourceMetadata = opts?.resourceMetadataMappings?.[v];
-				if (!resourceMetadata) throw new APIError$1("INTERNAL_SERVER_ERROR", { message: `missing resource_metadata mapping for ${v}` });
-				return `Bearer resource_metadata=${resourceMetadata}`;
-			}
-		}).join(", ");
-		throw new APIError$1("UNAUTHORIZED", { message: error.message }, { "WWW-Authenticate": wwwAuthenticateValue });
-	} else if (error instanceof Error) throw error;
-	else throw new Error(error);
-}
-//#endregion
-export { mcpHandler as n, handleMcpErrors as t };