@debugg-ai/debugg-ai-mcp 3.5.0 → 3.5.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +10 -0
- package/dist/httpServer.js +2 -2
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -5,6 +5,16 @@ All notable changes to the DebuggAI MCP project will be documented in this file.
|
|
|
5
5
|
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
|
|
6
6
|
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
7
7
|
|
|
8
|
+
## [3.5.1]
|
|
9
|
+
|
|
10
|
+
### Fixed — default OAuth issuer points at the Django AS
|
|
11
|
+
|
|
12
|
+
The default for `DEBUGGAI_OAUTH_ISSUER` (used in the RFC 9728 metadata's
|
|
13
|
+
`authorization_servers`) was `https://auth.debugg.ai` — which is only the login
|
|
14
|
+
UI. The actual Authorization Server is Django at `https://api.debugg.ai`, so the
|
|
15
|
+
default is now `https://api.debugg.ai`. A deployment can still override it via the
|
|
16
|
+
env var; this just makes a fresh container correct without one.
|
|
17
|
+
|
|
8
18
|
## [3.5.0]
|
|
9
19
|
|
|
10
20
|
### Added — Remote transport: Streamable HTTP + OAuth Resource Server (opt-in)
|
package/dist/httpServer.js
CHANGED
|
@@ -11,7 +11,7 @@
|
|
|
11
11
|
* on the first backend call). No token verification keys live here.
|
|
12
12
|
* - Missing token → 401 + `WWW-Authenticate: Bearer resource_metadata=...`,
|
|
13
13
|
* and we serve RFC 9728 metadata at /.well-known/oauth-protected-resource
|
|
14
|
-
* pointing clients at
|
|
14
|
+
* pointing clients at api.debugg.ai to run the OAuth flow.
|
|
15
15
|
*
|
|
16
16
|
* Deployment note: set DEBUGGAI_TOKEN_TYPE=bearer so the backend client forwards
|
|
17
17
|
* the OAuth token as `Authorization: Bearer` (not `Token`).
|
|
@@ -20,7 +20,7 @@ import { createServer } from 'node:http';
|
|
|
20
20
|
import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
|
|
21
21
|
import { runWithApiKey } from './utils/requestContext.js';
|
|
22
22
|
const PUBLIC_URL = (process.env.DEBUGGAI_MCP_PUBLIC_URL || 'https://mcp.debugg.ai').replace(/\/+$/, '');
|
|
23
|
-
const OAUTH_ISSUER = (process.env.DEBUGGAI_OAUTH_ISSUER || 'https://
|
|
23
|
+
const OAUTH_ISSUER = (process.env.DEBUGGAI_OAUTH_ISSUER || 'https://api.debugg.ai').replace(/\/+$/, '');
|
|
24
24
|
const RESOURCE_METADATA_PATH = '/.well-known/oauth-protected-resource';
|
|
25
25
|
const MCP_PATH = '/mcp';
|
|
26
26
|
const MAX_BODY_BYTES = 8 * 1024 * 1024;
|