@context-engine-bridge/context-engine-mcp-bridge 0.0.20 → 0.0.21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@context-engine-bridge/context-engine-mcp-bridge",
-  "version": "0.0.20",
+  "version": "0.0.21",
   "description": "Context Engine MCP bridge (http/stdio proxy combining indexer + memory servers)",
   "bin": {
     "ctxce": "bin/ctxce.js",

package/src/mcpServer.js

@@ -639,9 +639,34 @@ async function createBridgeServer(options) {
       }
     }
 
+    // Build requestInit with Authorization header for nginx auth_request passthrough.
+    // When the bridge connects to a remote endpoint (e.g. https://dev.example.com/indexer/mcp),
+    // nginx's auth_request subrequest checks the Authorization header. Without it, the
+    // connection is rejected with 401.
+    const transportOpts = {};
+    if (sessionId && !sessionId.startsWith("ctxce-")) {
+      transportOpts.requestInit = {
+        headers: {
+          Authorization: `Bearer ${sessionId}`,
+        },
+      };
+      debugLog(`[ctxce] Transport auth: injecting Authorization header (session ${sessionId.slice(0, 8)}...)`);
+    } else {
+      // Check for API key in environment as fallback
+      const envApiKey = (process.env.CTXCE_API_KEY || process.env.CTXCE_AUTH_TOKEN || "").trim();
+      if (envApiKey) {
+        transportOpts.requestInit = {
+          headers: {
+            Authorization: `Bearer ${envApiKey}`,
+          },
+        };
+        debugLog("[ctxce] Transport auth: injecting Authorization header (env API key/token)");
+      }
+    }
+
     let nextIndexerClient = null;
     try {
-      const indexerTransport = new StreamableHTTPClientTransport(indexerUrl);
+      const indexerTransport = new StreamableHTTPClientTransport(indexerUrl, transportOpts);
       const client = new Client(
         {
           name: "ctx-context-engine-bridge-http-client",
@@ -665,7 +690,7 @@ async function createBridgeServer(options) {
     let nextMemoryClient = null;
     if (memoryUrl) {
       try {
-        const memoryTransport = new StreamableHTTPClientTransport(memoryUrl);
+        const memoryTransport = new StreamableHTTPClientTransport(memoryUrl, transportOpts);
         const client = new Client(
           {
             name: "ctx-context-engine-bridge-memory-client",