@frontmcp/testing 0.6.1 → 0.6.2

package/src/auth/mock-oauth-server.js

@@ -1,253 +0,0 @@
-"use strict";
-/**
- * @file mock-oauth-server.ts
- * @description Mock OAuth server for testing transparent auth mode
- *
- * This module provides a mock OAuth/OIDC server that serves:
- * - JWKS endpoint for token verification
- * - OAuth metadata endpoint (optional)
- * - Token endpoint for anonymous tokens (optional)
- *
- * @example
- * ```typescript
- * import { MockOAuthServer, TestTokenFactory } from '@frontmcp/testing';
- *
- * const tokenFactory = new TestTokenFactory();
- * const oauthServer = new MockOAuthServer(tokenFactory);
- *
- * // Start the mock server
- * await oauthServer.start();
- *
- * // Configure your MCP server to use this mock
- * // IDP_PROVIDER_URL = oauthServer.baseUrl
- *
- * // Create tokens using the same factory
- * const token = await tokenFactory.createTestToken({ sub: 'user-123' });
- *
- * // Stop when done
- * await oauthServer.stop();
- * ```
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MockOAuthServer = void 0;
-const http_1 = require("http");
-// ═══════════════════════════════════════════════════════════════════
-// MOCK OAUTH SERVER
-// ═══════════════════════════════════════════════════════════════════
-/**
- * Mock OAuth/OIDC server for testing transparent auth mode
- *
- * Serves JWKS from a TestTokenFactory so that MCP servers can
- * validate test tokens without connecting to a real IdP.
- */
-class MockOAuthServer {
-    tokenFactory;
-    options;
-    server = null;
-    _info = null;
-    connections = new Set();
-    constructor(tokenFactory, options = {}) {
-        this.tokenFactory = tokenFactory;
-        this.options = options;
-    }
-    /**
-     * Start the mock OAuth server
-     */
-    async start() {
-        if (this.server) {
-            throw new Error('Mock OAuth server is already running');
-        }
-        const port = this.options.port ?? 0; // 0 = random available port
-        return new Promise((resolve, reject) => {
-            const server = (0, http_1.createServer)(this.handleRequest.bind(this));
-            this.server = server;
-            // Track connections for proper cleanup
-            server.on('connection', (socket) => {
-                this.connections.add(socket);
-                socket.on('close', () => this.connections.delete(socket));
-            });
-            server.on('error', (err) => {
-                this.log(`Server error: ${err.message}`);
-                reject(err);
-            });
-            server.listen(port, () => {
-                const address = server.address();
-                if (!address || typeof address === 'string') {
-                    reject(new Error('Failed to get server address'));
-                    return;
-                }
-                const actualPort = address.port;
-                const issuer = this.options.issuer ?? `http://localhost:${actualPort}`;
-                this._info = {
-                    baseUrl: `http://localhost:${actualPort}`,
-                    port: actualPort,
-                    issuer,
-                    jwksUrl: `http://localhost:${actualPort}/.well-known/jwks.json`,
-                };
-                this.log(`Mock OAuth server started at ${this._info.baseUrl}`);
-                resolve(this._info);
-            });
-        });
-    }
-    /**
-     * Stop the mock OAuth server
-     */
-    async stop() {
-        const server = this.server;
-        if (!server) {
-            return;
-        }
-        // Destroy all active connections to allow server.close() to complete
-        for (const socket of this.connections) {
-            socket.destroy();
-        }
-        this.connections.clear();
-        return new Promise((resolve, reject) => {
-            server.close((err) => {
-                if (err) {
-                    reject(err);
-                }
-                else {
-                    this.server = null;
-                    this._info = null;
-                    this.log('Mock OAuth server stopped');
-                    resolve();
-                }
-            });
-        });
-    }
-    /**
-     * Get server info
-     */
-    get info() {
-        if (!this._info) {
-            throw new Error('Mock OAuth server is not running');
-        }
-        return this._info;
-    }
-    /**
-     * Get the token factory (for creating tokens)
-     */
-    getTokenFactory() {
-        return this.tokenFactory;
-    }
-    // ═══════════════════════════════════════════════════════════════════
-    // PRIVATE
-    // ═══════════════════════════════════════════════════════════════════
-    async handleRequest(req, res) {
-        const url = req.url ?? '/';
-        this.log(`${req.method} ${url}`);
-        // CORS headers
-        res.setHeader('Access-Control-Allow-Origin', '*');
-        res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
-        res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization');
-        if (req.method === 'OPTIONS') {
-            res.writeHead(204);
-            res.end();
-            return;
-        }
-        try {
-            if (url === '/.well-known/jwks.json' || url === '/.well-known/jwks') {
-                await this.handleJwks(req, res);
-            }
-            else if (url === '/.well-known/openid-configuration') {
-                await this.handleOidcConfig(req, res);
-            }
-            else if (url === '/.well-known/oauth-authorization-server') {
-                await this.handleOAuthMetadata(req, res);
-            }
-            else if (url === '/oauth/token') {
-                await this.handleTokenEndpoint(req, res);
-            }
-            else {
-                res.writeHead(404, { 'Content-Type': 'application/json' });
-                res.end(JSON.stringify({ error: 'not_found', error_description: 'Endpoint not found' }));
-            }
-        }
-        catch (error) {
-            this.log(`Error handling request: ${error}`);
-            res.writeHead(500, { 'Content-Type': 'application/json' });
-            res.end(JSON.stringify({ error: 'server_error', error_description: 'Internal server error' }));
-        }
-    }
-    async handleJwks(_req, res) {
-        const jwks = await this.tokenFactory.getPublicJwks();
-        res.writeHead(200, { 'Content-Type': 'application/json' });
-        res.end(JSON.stringify(jwks));
-        this.log('Served JWKS');
-    }
-    async handleOidcConfig(_req, res) {
-        const issuer = this._info?.issuer ?? 'http://localhost';
-        const config = {
-            issuer,
-            authorization_endpoint: `${issuer}/oauth/authorize`,
-            token_endpoint: `${issuer}/oauth/token`,
-            jwks_uri: `${issuer}/.well-known/jwks.json`,
-            response_types_supported: ['code', 'token'],
-            subject_types_supported: ['public'],
-            id_token_signing_alg_values_supported: ['RS256'],
-            scopes_supported: ['openid', 'profile', 'email'],
-            token_endpoint_auth_methods_supported: ['client_secret_basic', 'client_secret_post', 'none'],
-            claims_supported: ['sub', 'iss', 'aud', 'exp', 'iat', 'email', 'name'],
-            grant_types_supported: ['authorization_code', 'refresh_token', 'client_credentials', 'anonymous'],
-        };
-        res.writeHead(200, { 'Content-Type': 'application/json' });
-        res.end(JSON.stringify(config));
-        this.log('Served OIDC configuration');
-    }
-    async handleOAuthMetadata(_req, res) {
-        const issuer = this._info?.issuer ?? 'http://localhost';
-        const metadata = {
-            issuer,
-            authorization_endpoint: `${issuer}/oauth/authorize`,
-            token_endpoint: `${issuer}/oauth/token`,
-            jwks_uri: `${issuer}/.well-known/jwks.json`,
-            response_types_supported: ['code', 'token'],
-            grant_types_supported: ['authorization_code', 'refresh_token', 'client_credentials', 'anonymous'],
-            token_endpoint_auth_methods_supported: ['client_secret_basic', 'client_secret_post', 'none'],
-            scopes_supported: ['openid', 'profile', 'email', 'anonymous'],
-        };
-        res.writeHead(200, { 'Content-Type': 'application/json' });
-        res.end(JSON.stringify(metadata));
-        this.log('Served OAuth metadata');
-    }
-    async handleTokenEndpoint(req, res) {
-        // Parse request body
-        const body = await this.readBody(req);
-        const params = new URLSearchParams(body);
-        const grantType = params.get('grant_type');
-        if (grantType === 'anonymous') {
-            // Issue an anonymous token
-            const token = await this.tokenFactory.createAnonymousToken();
-            res.writeHead(200, { 'Content-Type': 'application/json' });
-            res.end(JSON.stringify({
-                access_token: token,
-                token_type: 'Bearer',
-                expires_in: 3600,
-            }));
-            this.log('Issued anonymous token');
-        }
-        else {
-            res.writeHead(400, { 'Content-Type': 'application/json' });
-            res.end(JSON.stringify({
-                error: 'unsupported_grant_type',
-                error_description: 'Only anonymous grant type is supported in mock server',
-            }));
-        }
-    }
-    readBody(req) {
-        return new Promise((resolve, reject) => {
-            const chunks = [];
-            req.on('data', (chunk) => chunks.push(chunk));
-            req.on('end', () => resolve(Buffer.concat(chunks).toString()));
-            req.on('error', reject);
-        });
-    }
-    log(message) {
-        if (this.options.debug) {
-            console.log(`[MockOAuthServer] ${message}`);
-        }
-    }
-}
-exports.MockOAuthServer = MockOAuthServer;
-//# sourceMappingURL=mock-oauth-server.js.map

package/src/auth/mock-oauth-server.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mock-oauth-server.js","sourceRoot":"","sources":["../../../src/auth/mock-oauth-server.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;;;AAEH,+BAA6E;AA2B7E,sEAAsE;AACtE,oBAAoB;AACpB,sEAAsE;AAEtE;;;;;GAKG;AACH,MAAa,eAAe;IACT,YAAY,CAAmB;IAC/B,OAAO,CAAyB;IACzC,MAAM,GAAkB,IAAI,CAAC;IAC7B,KAAK,GAA+B,IAAI,CAAC;IACzC,WAAW,GAA8B,IAAI,GAAG,EAAE,CAAC;IAE3D,YAAY,YAA8B,EAAE,UAAkC,EAAE;QAC9E,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,4BAA4B;QAEjE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YAErB,uCAAuC;YACvC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE;gBACjC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC7B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5D,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACzB,IAAI,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzC,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;gBACvB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAC5C,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;oBAClD,OAAO;gBACT,CAAC;gBAED,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;gBAChC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,oBAAoB,UAAU,EAAE,CAAC;gBAEvE,IAAI,CAAC,KAAK,GAAG;oBACX,OAAO,EAAE,oBAAoB,UAAU,EAAE;oBACzC,IAAI,EAAE,UAAU;oBAChB,MAAM;oBACN,OAAO,EAAE,oBAAoB,UAAU,wBAAwB;iBAChE,CAAC;gBAEF,IAAI,CAAC,GAAG,CAAC,gCAAgC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC/D,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QAED,qEAAqE;QACrE,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAEzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACnB,IAAI,GAAG,EAAE,CAAC;oBACR,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;oBACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;oBAClB,IAAI,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;oBACtC,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,sEAAsE;IACtE,UAAU;IACV,sEAAsE;IAE9D,KAAK,CAAC,aAAa,CAAC,GAAoB,EAAE,GAAmB;QACnE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAEjC,eAAe;QACf,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAClD,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,oBAAoB,CAAC,CAAC;QACpE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,6BAA6B,CAAC,CAAC;QAE7E,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,IAAI,GAAG,KAAK,wBAAwB,IAAI,GAAG,KAAK,mBAAmB,EAAE,CAAC;gBACpE,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAClC,CAAC;iBAAM,IAAI,GAAG,KAAK,mCAAmC,EAAE,CAAC;gBACvD,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACxC,CAAC;iBAAM,IAAI,GAAG,KAAK,yCAAyC,EAAE,CAAC;gBAC7D,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC3C,CAAC;iBAAM,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;YAC7C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,IAAqB,EAAE,GAAmB;QACjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;QACrD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,IAAqB,EAAE,GAAmB;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,kBAAkB,CAAC;QACxD,MAAM,MAAM,GAAG;YACb,MAAM;YACN,sBAAsB,EAAE,GAAG,MAAM,kBAAkB;YACnD,cAAc,EAAE,GAAG,MAAM,cAAc;YACvC,QAAQ,EAAE,GAAG,MAAM,wBAAwB;YAC3C,wBAAwB,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;YAC3C,uBAAuB,EAAE,CAAC,QAAQ,CAAC;YACnC,qCAAqC,EAAE,CAAC,OAAO,CAAC;YAChD,gBAAgB,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;YAChD,qCAAqC,EAAE,CAAC,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,CAAC;YAC5F,gBAAgB,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC;YACtE,qBAAqB,EAAE,CAAC,oBAAoB,EAAE,eAAe,EAAE,oBAAoB,EAAE,WAAW,CAAC;SAClG,CAAC;QAEF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,IAAqB,EAAE,GAAmB;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,kBAAkB,CAAC;QACxD,MAAM,QAAQ,GAAG;YACf,MAAM;YACN,sBAAsB,EAAE,GAAG,MAAM,kBAAkB;YACnD,cAAc,EAAE,GAAG,MAAM,cAAc;YACvC,QAAQ,EAAE,GAAG,MAAM,wBAAwB;YAC3C,wBAAwB,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;YAC3C,qBAAqB,EAAE,CAAC,oBAAoB,EAAE,eAAe,EAAE,oBAAoB,EAAE,WAAW,CAAC;YACjG,qCAAqC,EAAE,CAAC,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,CAAC;YAC5F,gBAAgB,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC;SAC9D,CAAC;QAEF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,GAAoB,EAAE,GAAmB;QACzE,qBAAqB;QACrB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAE3C,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;YAC9B,2BAA2B;YAC3B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,oBAAoB,EAAE,CAAC;YAC7D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;gBACb,YAAY,EAAE,KAAK;gBACnB,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,IAAI;aACjB,CAAC,CACH,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,wBAAwB;gBAC/B,iBAAiB,EAAE,uDAAuD;aAC3E,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,GAAoB;QACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC/D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,GAAG,CAAC,OAAe;QACzB,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;CACF;AA1OD,0CA0OC","sourcesContent":["/**\n * @file mock-oauth-server.ts\n * @description Mock OAuth server for testing transparent auth mode\n *\n * This module provides a mock OAuth/OIDC server that serves:\n * - JWKS endpoint for token verification\n * - OAuth metadata endpoint (optional)\n * - Token endpoint for anonymous tokens (optional)\n *\n * @example\n * ```typescript\n * import { MockOAuthServer, TestTokenFactory } from '@frontmcp/testing';\n *\n * const tokenFactory = new TestTokenFactory();\n * const oauthServer = new MockOAuthServer(tokenFactory);\n *\n * // Start the mock server\n * await oauthServer.start();\n *\n * // Configure your MCP server to use this mock\n * // IDP_PROVIDER_URL = oauthServer.baseUrl\n *\n * // Create tokens using the same factory\n * const token = await tokenFactory.createTestToken({ sub: 'user-123' });\n *\n * // Stop when done\n * await oauthServer.stop();\n * ```\n */\n\nimport { createServer, Server, IncomingMessage, ServerResponse } from 'http';\nimport type { TestTokenFactory } from './token-factory';\n\n// ═══════════════════════════════════════════════════════════════════\n// TYPES\n// ═══════════════════════════════════════════════════════════════════\n\nexport interface MockOAuthServerOptions {\n  /** Port to listen on (default: random available port) */\n  port?: number;\n  /** Issuer URL (default: http://localhost:{port}) */\n  issuer?: string;\n  /** Enable debug logging */\n  debug?: boolean;\n}\n\nexport interface MockOAuthServerInfo {\n  /** Base URL of the server */\n  baseUrl: string;\n  /** Port the server is listening on */\n  port: number;\n  /** Issuer URL */\n  issuer: string;\n  /** JWKS endpoint URL */\n  jwksUrl: string;\n}\n\n// ═══════════════════════════════════════════════════════════════════\n// MOCK OAUTH SERVER\n// ═══════════════════════════════════════════════════════════════════\n\n/**\n * Mock OAuth/OIDC server for testing transparent auth mode\n *\n * Serves JWKS from a TestTokenFactory so that MCP servers can\n * validate test tokens without connecting to a real IdP.\n */\nexport class MockOAuthServer {\n  private readonly tokenFactory: TestTokenFactory;\n  private readonly options: MockOAuthServerOptions;\n  private server: Server | null = null;\n  private _info: MockOAuthServerInfo | null = null;\n  private connections: Set<import('net').Socket> = new Set();\n\n  constructor(tokenFactory: TestTokenFactory, options: MockOAuthServerOptions = {}) {\n    this.tokenFactory = tokenFactory;\n    this.options = options;\n  }\n\n  /**\n   * Start the mock OAuth server\n   */\n  async start(): Promise<MockOAuthServerInfo> {\n    if (this.server) {\n      throw new Error('Mock OAuth server is already running');\n    }\n\n    const port = this.options.port ?? 0; // 0 = random available port\n\n    return new Promise((resolve, reject) => {\n      const server = createServer(this.handleRequest.bind(this));\n      this.server = server;\n\n      // Track connections for proper cleanup\n      server.on('connection', (socket) => {\n        this.connections.add(socket);\n        socket.on('close', () => this.connections.delete(socket));\n      });\n\n      server.on('error', (err) => {\n        this.log(`Server error: ${err.message}`);\n        reject(err);\n      });\n\n      server.listen(port, () => {\n        const address = server.address();\n        if (!address || typeof address === 'string') {\n          reject(new Error('Failed to get server address'));\n          return;\n        }\n\n        const actualPort = address.port;\n        const issuer = this.options.issuer ?? `http://localhost:${actualPort}`;\n\n        this._info = {\n          baseUrl: `http://localhost:${actualPort}`,\n          port: actualPort,\n          issuer,\n          jwksUrl: `http://localhost:${actualPort}/.well-known/jwks.json`,\n        };\n\n        this.log(`Mock OAuth server started at ${this._info.baseUrl}`);\n        resolve(this._info);\n      });\n    });\n  }\n\n  /**\n   * Stop the mock OAuth server\n   */\n  async stop(): Promise<void> {\n    const server = this.server;\n    if (!server) {\n      return;\n    }\n\n    // Destroy all active connections to allow server.close() to complete\n    for (const socket of this.connections) {\n      socket.destroy();\n    }\n    this.connections.clear();\n\n    return new Promise((resolve, reject) => {\n      server.close((err) => {\n        if (err) {\n          reject(err);\n        } else {\n          this.server = null;\n          this._info = null;\n          this.log('Mock OAuth server stopped');\n          resolve();\n        }\n      });\n    });\n  }\n\n  /**\n   * Get server info\n   */\n  get info(): MockOAuthServerInfo {\n    if (!this._info) {\n      throw new Error('Mock OAuth server is not running');\n    }\n    return this._info;\n  }\n\n  /**\n   * Get the token factory (for creating tokens)\n   */\n  getTokenFactory(): TestTokenFactory {\n    return this.tokenFactory;\n  }\n\n  // ═══════════════════════════════════════════════════════════════════\n  // PRIVATE\n  // ═══════════════════════════════════════════════════════════════════\n\n  private async handleRequest(req: IncomingMessage, res: ServerResponse): Promise<void> {\n    const url = req.url ?? '/';\n    this.log(`${req.method} ${url}`);\n\n    // CORS headers\n    res.setHeader('Access-Control-Allow-Origin', '*');\n    res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');\n    res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization');\n\n    if (req.method === 'OPTIONS') {\n      res.writeHead(204);\n      res.end();\n      return;\n    }\n\n    try {\n      if (url === '/.well-known/jwks.json' || url === '/.well-known/jwks') {\n        await this.handleJwks(req, res);\n      } else if (url === '/.well-known/openid-configuration') {\n        await this.handleOidcConfig(req, res);\n      } else if (url === '/.well-known/oauth-authorization-server') {\n        await this.handleOAuthMetadata(req, res);\n      } else if (url === '/oauth/token') {\n        await this.handleTokenEndpoint(req, res);\n      } else {\n        res.writeHead(404, { 'Content-Type': 'application/json' });\n        res.end(JSON.stringify({ error: 'not_found', error_description: 'Endpoint not found' }));\n      }\n    } catch (error) {\n      this.log(`Error handling request: ${error}`);\n      res.writeHead(500, { 'Content-Type': 'application/json' });\n      res.end(JSON.stringify({ error: 'server_error', error_description: 'Internal server error' }));\n    }\n  }\n\n  private async handleJwks(_req: IncomingMessage, res: ServerResponse): Promise<void> {\n    const jwks = await this.tokenFactory.getPublicJwks();\n    res.writeHead(200, { 'Content-Type': 'application/json' });\n    res.end(JSON.stringify(jwks));\n    this.log('Served JWKS');\n  }\n\n  private async handleOidcConfig(_req: IncomingMessage, res: ServerResponse): Promise<void> {\n    const issuer = this._info?.issuer ?? 'http://localhost';\n    const config = {\n      issuer,\n      authorization_endpoint: `${issuer}/oauth/authorize`,\n      token_endpoint: `${issuer}/oauth/token`,\n      jwks_uri: `${issuer}/.well-known/jwks.json`,\n      response_types_supported: ['code', 'token'],\n      subject_types_supported: ['public'],\n      id_token_signing_alg_values_supported: ['RS256'],\n      scopes_supported: ['openid', 'profile', 'email'],\n      token_endpoint_auth_methods_supported: ['client_secret_basic', 'client_secret_post', 'none'],\n      claims_supported: ['sub', 'iss', 'aud', 'exp', 'iat', 'email', 'name'],\n      grant_types_supported: ['authorization_code', 'refresh_token', 'client_credentials', 'anonymous'],\n    };\n\n    res.writeHead(200, { 'Content-Type': 'application/json' });\n    res.end(JSON.stringify(config));\n    this.log('Served OIDC configuration');\n  }\n\n  private async handleOAuthMetadata(_req: IncomingMessage, res: ServerResponse): Promise<void> {\n    const issuer = this._info?.issuer ?? 'http://localhost';\n    const metadata = {\n      issuer,\n      authorization_endpoint: `${issuer}/oauth/authorize`,\n      token_endpoint: `${issuer}/oauth/token`,\n      jwks_uri: `${issuer}/.well-known/jwks.json`,\n      response_types_supported: ['code', 'token'],\n      grant_types_supported: ['authorization_code', 'refresh_token', 'client_credentials', 'anonymous'],\n      token_endpoint_auth_methods_supported: ['client_secret_basic', 'client_secret_post', 'none'],\n      scopes_supported: ['openid', 'profile', 'email', 'anonymous'],\n    };\n\n    res.writeHead(200, { 'Content-Type': 'application/json' });\n    res.end(JSON.stringify(metadata));\n    this.log('Served OAuth metadata');\n  }\n\n  private async handleTokenEndpoint(req: IncomingMessage, res: ServerResponse): Promise<void> {\n    // Parse request body\n    const body = await this.readBody(req);\n    const params = new URLSearchParams(body);\n    const grantType = params.get('grant_type');\n\n    if (grantType === 'anonymous') {\n      // Issue an anonymous token\n      const token = await this.tokenFactory.createAnonymousToken();\n      res.writeHead(200, { 'Content-Type': 'application/json' });\n      res.end(\n        JSON.stringify({\n          access_token: token,\n          token_type: 'Bearer',\n          expires_in: 3600,\n        }),\n      );\n      this.log('Issued anonymous token');\n    } else {\n      res.writeHead(400, { 'Content-Type': 'application/json' });\n      res.end(\n        JSON.stringify({\n          error: 'unsupported_grant_type',\n          error_description: 'Only anonymous grant type is supported in mock server',\n        }),\n      );\n    }\n  }\n\n  private readBody(req: IncomingMessage): Promise<string> {\n    return new Promise((resolve, reject) => {\n      const chunks: Buffer[] = [];\n      req.on('data', (chunk) => chunks.push(chunk));\n      req.on('end', () => resolve(Buffer.concat(chunks).toString()));\n      req.on('error', reject);\n    });\n  }\n\n  private log(message: string): void {\n    if (this.options.debug) {\n      console.log(`[MockOAuthServer] ${message}`);\n    }\n  }\n}\n"]}

package/src/auth/token-factory.js

@@ -1,181 +0,0 @@
-"use strict";
-/**
- * @file token-factory.ts
- * @description JWT token factory for testing authentication
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TestTokenFactory = void 0;
-const jose_1 = require("jose");
-// ═══════════════════════════════════════════════════════════════════
-// TOKEN FACTORY CLASS
-// ═══════════════════════════════════════════════════════════════════
-/**
- * Factory for creating JWT tokens for testing
- *
- * @example
- * ```typescript
- * const factory = new TestTokenFactory();
- *
- * // Create a token with claims
- * const token = await factory.createTestToken({
- *   sub: 'user-123',
- *   scopes: ['read', 'write'],
- * });
- *
- * // Create convenience tokens
- * const adminToken = await factory.createAdminToken();
- * const userToken = await factory.createUserToken();
- * ```
- */
-class TestTokenFactory {
-    issuer;
-    audience;
-    privateKey = null;
-    publicKey = null;
-    jwk = null;
-    keyId;
-    constructor(options = {}) {
-        this.issuer = options.issuer ?? 'https://test.frontmcp.local';
-        this.audience = options.audience ?? 'frontmcp-test';
-        this.keyId = `test-key-${Date.now()}`;
-    }
-    /**
-     * Initialize the key pair (called automatically on first use)
-     */
-    async ensureKeys() {
-        if (this.privateKey && this.publicKey)
-            return;
-        // Generate RSA key pair
-        const { publicKey, privateKey } = await (0, jose_1.generateKeyPair)('RS256', {
-            extractable: true,
-        });
-        this.privateKey = privateKey;
-        this.publicKey = publicKey;
-        // Export public key as JWK
-        this.jwk = await (0, jose_1.exportJWK)(publicKey);
-        this.jwk.kid = this.keyId;
-        this.jwk.use = 'sig';
-        this.jwk.alg = 'RS256';
-    }
-    /**
-     * Create a JWT token with the specified claims
-     */
-    async createTestToken(options) {
-        await this.ensureKeys();
-        const now = Math.floor(Date.now() / 1000);
-        const exp = options.exp ?? 3600;
-        const payload = {
-            iss: options.iss ?? this.issuer,
-            sub: options.sub,
-            aud: options.aud ?? this.audience,
-            iat: now,
-            exp: now + exp,
-            scope: options.scopes?.join(' '),
-            ...options.claims,
-        };
-        const token = await new jose_1.SignJWT(payload)
-            .setProtectedHeader({ alg: 'RS256', kid: this.keyId })
-            .sign(this.privateKey);
-        return token;
-    }
-    /**
-     * Create an admin token with full access
-     */
-    async createAdminToken(sub = 'admin-001') {
-        return this.createTestToken({
-            sub,
-            scopes: ['admin:*', 'read', 'write', 'delete'],
-            claims: {
-                email: 'admin@test.local',
-                name: 'Test Admin',
-                role: 'admin',
-            },
-        });
-    }
-    /**
-     * Create a regular user token
-     */
-    async createUserToken(sub = 'user-001', scopes = ['read', 'write']) {
-        return this.createTestToken({
-            sub,
-            scopes,
-            claims: {
-                email: 'user@test.local',
-                name: 'Test User',
-                role: 'user',
-            },
-        });
-    }
-    /**
-     * Create an anonymous user token
-     */
-    async createAnonymousToken() {
-        return this.createTestToken({
-            sub: `anon:${Date.now()}`,
-            scopes: ['anonymous'],
-            claims: {
-                name: 'Anonymous',
-                role: 'anonymous',
-            },
-        });
-    }
-    /**
-     * Create an expired token (for testing token expiration)
-     */
-    async createExpiredToken(options) {
-        await this.ensureKeys();
-        const now = Math.floor(Date.now() / 1000);
-        const payload = {
-            iss: this.issuer,
-            sub: options.sub,
-            aud: this.audience,
-            iat: now - 7200, // 2 hours ago
-            exp: now - 3600, // Expired 1 hour ago
-        };
-        const token = await new jose_1.SignJWT(payload)
-            .setProtectedHeader({ alg: 'RS256', kid: this.keyId })
-            .sign(this.privateKey);
-        return token;
-    }
-    /**
-     * Create a token with an invalid signature (for testing signature validation)
-     */
-    createTokenWithInvalidSignature(options) {
-        const now = Math.floor(Date.now() / 1000);
-        // Create a fake JWT with an invalid signature
-        const header = Buffer.from(JSON.stringify({ alg: 'RS256', kid: this.keyId })).toString('base64url');
-        const payload = Buffer.from(JSON.stringify({
-            iss: this.issuer,
-            sub: options.sub,
-            aud: this.audience,
-            iat: now,
-            exp: now + 3600,
-        })).toString('base64url');
-        // Invalid signature (just random bytes)
-        const signature = Buffer.from('invalid-signature-' + Date.now()).toString('base64url');
-        return `${header}.${payload}.${signature}`;
-    }
-    /**
-     * Get the public JWKS for verifying tokens
-     */
-    async getPublicJwks() {
-        await this.ensureKeys();
-        return {
-            keys: [this.jwk],
-        };
-    }
-    /**
-     * Get the issuer URL
-     */
-    getIssuer() {
-        return this.issuer;
-    }
-    /**
-     * Get the audience
-     */
-    getAudience() {
-        return this.audience;
-    }
-}
-exports.TestTokenFactory = TestTokenFactory;
-//# sourceMappingURL=token-factory.js.map

package/src/auth/token-factory.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"token-factory.js","sourceRoot":"","sources":["../../../src/auth/token-factory.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,+BAAsF;AA+BtF,sEAAsE;AACtE,sBAAsB;AACtB,sEAAsE;AAEtE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAa,gBAAgB;IACV,MAAM,CAAS;IACf,QAAQ,CAAS;IAC1B,UAAU,GAAyB,IAAI,CAAC;IACxC,SAAS,GAAyB,IAAI,CAAC;IACvC,GAAG,GAAe,IAAI,CAAC;IACvB,KAAK,CAAS;IAEtB,YAAY,UAA+B,EAAE;QAC3C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,6BAA6B,CAAC;QAC9D,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAC;QACpD,IAAI,CAAC,KAAK,GAAG,YAAY,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACxC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,UAAU;QACtB,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAE9C,wBAAwB;QACxB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,IAAA,sBAAe,EAAC,OAAO,EAAE;YAC/D,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAE3B,2BAA2B;QAC3B,IAAI,CAAC,GAAG,GAAG,MAAM,IAAA,gBAAS,EAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,OAA2B;QAC/C,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAExB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC;QAEhC,MAAM,OAAO,GAAe;YAC1B,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM;YAC/B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,QAAQ;YACjC,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,GAAG,GAAG,GAAG;YACd,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC;YAChC,GAAG,OAAO,CAAC,MAAM;SAClB,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,IAAI,cAAO,CAAC,OAAO,CAAC;aACrC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;aACrD,IAAI,CAAC,IAAI,CAAC,UAAW,CAAC,CAAC;QAE1B,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,GAAG,GAAG,WAAW;QACtC,OAAO,IAAI,CAAC,eAAe,CAAC;YAC1B,GAAG;YACH,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC;YAC9C,MAAM,EAAE;gBACN,KAAK,EAAE,kBAAkB;gBACzB,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,OAAO;aACd;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,GAAG,GAAG,UAAU,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC;QAChE,OAAO,IAAI,CAAC,eAAe,CAAC;YAC1B,GAAG;YACH,MAAM;YACN,MAAM,EAAE;gBACN,KAAK,EAAE,iBAAiB;gBACxB,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,MAAM;aACb;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB;QACxB,OAAO,IAAI,CAAC,eAAe,CAAC;YAC1B,GAAG,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE;YACzB,MAAM,EAAE,CAAC,WAAW,CAAC;YACrB,MAAM,EAAE;gBACN,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,WAAW;aAClB;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,OAAwC;QAC/D,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAExB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,MAAM,OAAO,GAAe;YAC1B,GAAG,EAAE,IAAI,CAAC,MAAM;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,IAAI,CAAC,QAAQ;YAClB,GAAG,EAAE,GAAG,GAAG,IAAI,EAAE,cAAc;YAC/B,GAAG,EAAE,GAAG,GAAG,IAAI,EAAE,qBAAqB;SACvC,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,IAAI,cAAO,CAAC,OAAO,CAAC;aACrC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;aACrD,IAAI,CAAC,IAAI,CAAC,UAAW,CAAC,CAAC;QAE1B,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,+BAA+B,CAAC,OAAwC;QACtE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,8CAA8C;QAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpG,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CACzB,IAAI,CAAC,SAAS,CAAC;YACb,GAAG,EAAE,IAAI,CAAC,MAAM;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,IAAI,CAAC,QAAQ;YAClB,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,GAAG,GAAG,IAAI;SAChB,CAAC,CACH,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAExB,wCAAwC;QACxC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEvF,OAAO,GAAG,MAAM,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa;QACjB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO;YACL,IAAI,EAAE,CAAC,IAAI,CAAC,GAAI,CAAC;SAClB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF;AA/KD,4CA+KC","sourcesContent":["/**\n * @file token-factory.ts\n * @description JWT token factory for testing authentication\n */\n\nimport { SignJWT, generateKeyPair, exportJWK, type JWTPayload, type JWK } from 'jose';\n\n// ═══════════════════════════════════════════════════════════════════\n// TYPES\n// ═══════════════════════════════════════════════════════════════════\n\nexport interface CreateTokenOptions {\n  /** Subject (user ID) - required */\n  sub: string;\n  /** Issuer URL */\n  iss?: string;\n  /** Audience */\n  aud?: string | string[];\n  /** OAuth scopes */\n  scopes?: string[];\n  /** Expiration time in seconds from now (default: 3600) */\n  exp?: number;\n  /** Additional custom claims */\n  claims?: Record<string, unknown>;\n}\n\nexport interface TokenFactoryOptions {\n  /** Default issuer URL */\n  issuer?: string;\n  /** Default audience */\n  audience?: string;\n}\n\n// Type for crypto key\ntype CryptoKeyLike = CryptoKey | Uint8Array;\n\n// ═══════════════════════════════════════════════════════════════════\n// TOKEN FACTORY CLASS\n// ═══════════════════════════════════════════════════════════════════\n\n/**\n * Factory for creating JWT tokens for testing\n *\n * @example\n * ```typescript\n * const factory = new TestTokenFactory();\n *\n * // Create a token with claims\n * const token = await factory.createTestToken({\n *   sub: 'user-123',\n *   scopes: ['read', 'write'],\n * });\n *\n * // Create convenience tokens\n * const adminToken = await factory.createAdminToken();\n * const userToken = await factory.createUserToken();\n * ```\n */\nexport class TestTokenFactory {\n  private readonly issuer: string;\n  private readonly audience: string;\n  private privateKey: CryptoKeyLike | null = null;\n  private publicKey: CryptoKeyLike | null = null;\n  private jwk: JWK | null = null;\n  private keyId: string;\n\n  constructor(options: TokenFactoryOptions = {}) {\n    this.issuer = options.issuer ?? 'https://test.frontmcp.local';\n    this.audience = options.audience ?? 'frontmcp-test';\n    this.keyId = `test-key-${Date.now()}`;\n  }\n\n  /**\n   * Initialize the key pair (called automatically on first use)\n   */\n  private async ensureKeys(): Promise<void> {\n    if (this.privateKey && this.publicKey) return;\n\n    // Generate RSA key pair\n    const { publicKey, privateKey } = await generateKeyPair('RS256', {\n      extractable: true,\n    });\n\n    this.privateKey = privateKey;\n    this.publicKey = publicKey;\n\n    // Export public key as JWK\n    this.jwk = await exportJWK(publicKey);\n    this.jwk.kid = this.keyId;\n    this.jwk.use = 'sig';\n    this.jwk.alg = 'RS256';\n  }\n\n  /**\n   * Create a JWT token with the specified claims\n   */\n  async createTestToken(options: CreateTokenOptions): Promise<string> {\n    await this.ensureKeys();\n\n    const now = Math.floor(Date.now() / 1000);\n    const exp = options.exp ?? 3600;\n\n    const payload: JWTPayload = {\n      iss: options.iss ?? this.issuer,\n      sub: options.sub,\n      aud: options.aud ?? this.audience,\n      iat: now,\n      exp: now + exp,\n      scope: options.scopes?.join(' '),\n      ...options.claims,\n    };\n\n    const token = await new SignJWT(payload)\n      .setProtectedHeader({ alg: 'RS256', kid: this.keyId })\n      .sign(this.privateKey!);\n\n    return token;\n  }\n\n  /**\n   * Create an admin token with full access\n   */\n  async createAdminToken(sub = 'admin-001'): Promise<string> {\n    return this.createTestToken({\n      sub,\n      scopes: ['admin:*', 'read', 'write', 'delete'],\n      claims: {\n        email: 'admin@test.local',\n        name: 'Test Admin',\n        role: 'admin',\n      },\n    });\n  }\n\n  /**\n   * Create a regular user token\n   */\n  async createUserToken(sub = 'user-001', scopes = ['read', 'write']): Promise<string> {\n    return this.createTestToken({\n      sub,\n      scopes,\n      claims: {\n        email: 'user@test.local',\n        name: 'Test User',\n        role: 'user',\n      },\n    });\n  }\n\n  /**\n   * Create an anonymous user token\n   */\n  async createAnonymousToken(): Promise<string> {\n    return this.createTestToken({\n      sub: `anon:${Date.now()}`,\n      scopes: ['anonymous'],\n      claims: {\n        name: 'Anonymous',\n        role: 'anonymous',\n      },\n    });\n  }\n\n  /**\n   * Create an expired token (for testing token expiration)\n   */\n  async createExpiredToken(options: Pick<CreateTokenOptions, 'sub'>): Promise<string> {\n    await this.ensureKeys();\n\n    const now = Math.floor(Date.now() / 1000);\n\n    const payload: JWTPayload = {\n      iss: this.issuer,\n      sub: options.sub,\n      aud: this.audience,\n      iat: now - 7200, // 2 hours ago\n      exp: now - 3600, // Expired 1 hour ago\n    };\n\n    const token = await new SignJWT(payload)\n      .setProtectedHeader({ alg: 'RS256', kid: this.keyId })\n      .sign(this.privateKey!);\n\n    return token;\n  }\n\n  /**\n   * Create a token with an invalid signature (for testing signature validation)\n   */\n  createTokenWithInvalidSignature(options: Pick<CreateTokenOptions, 'sub'>): string {\n    const now = Math.floor(Date.now() / 1000);\n\n    // Create a fake JWT with an invalid signature\n    const header = Buffer.from(JSON.stringify({ alg: 'RS256', kid: this.keyId })).toString('base64url');\n    const payload = Buffer.from(\n      JSON.stringify({\n        iss: this.issuer,\n        sub: options.sub,\n        aud: this.audience,\n        iat: now,\n        exp: now + 3600,\n      }),\n    ).toString('base64url');\n\n    // Invalid signature (just random bytes)\n    const signature = Buffer.from('invalid-signature-' + Date.now()).toString('base64url');\n\n    return `${header}.${payload}.${signature}`;\n  }\n\n  /**\n   * Get the public JWKS for verifying tokens\n   */\n  async getPublicJwks(): Promise<{ keys: JWK[] }> {\n    await this.ensureKeys();\n    return {\n      keys: [this.jwk!],\n    };\n  }\n\n  /**\n   * Get the issuer URL\n   */\n  getIssuer(): string {\n    return this.issuer;\n  }\n\n  /**\n   * Get the audience\n   */\n  getAudience(): string {\n    return this.audience;\n  }\n}\n"]}

package/src/auth/user-fixtures.js

@@ -1,92 +0,0 @@
-"use strict";
-/**
- * @file user-fixtures.ts
- * @description Pre-defined test user fixtures
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TestUsers = void 0;
-exports.createTestUser = createTestUser;
-/**
- * Pre-defined test users for common testing scenarios
- */
-exports.TestUsers = {
-    /**
-     * Admin user with full access
-     */
-    admin: {
-        sub: 'admin-001',
-        email: 'admin@test.local',
-        name: 'Test Admin',
-        scopes: ['admin:*', 'read', 'write', 'delete'],
-        role: 'admin',
-    },
-    /**
-     * Regular user with read/write access
-     */
-    user: {
-        sub: 'user-001',
-        email: 'user@test.local',
-        name: 'Test User',
-        scopes: ['read', 'write'],
-        role: 'user',
-    },
-    /**
-     * Read-only user
-     */
-    readOnly: {
-        sub: 'readonly-001',
-        email: 'readonly@test.local',
-        name: 'Read Only User',
-        scopes: ['read'],
-        role: 'readonly',
-    },
-    /**
-     * Anonymous user
-     */
-    anonymous: {
-        sub: 'anon:001',
-        name: 'Anonymous',
-        scopes: ['anonymous'],
-        role: 'anonymous',
-    },
-    /**
-     * User with no scopes (for testing access denied)
-     */
-    noScopes: {
-        sub: 'noscopes-001',
-        email: 'noscopes@test.local',
-        name: 'No Scopes User',
-        scopes: [],
-        role: 'user',
-    },
-    /**
-     * User with only tool execution scope
-     */
-    toolsOnly: {
-        sub: 'toolsonly-001',
-        email: 'toolsonly@test.local',
-        name: 'Tools Only User',
-        scopes: ['tools:execute'],
-        role: 'user',
-    },
-    /**
-     * User with only resource read scope
-     */
-    resourcesOnly: {
-        sub: 'resourcesonly-001',
-        email: 'resourcesonly@test.local',
-        name: 'Resources Only User',
-        scopes: ['resources:read'],
-        role: 'user',
-    },
-};
-/**
- * Create a custom test user
- */
-function createTestUser(overrides) {
-    return {
-        scopes: [],
-        ...overrides,
-    };
-}
-//# sourceMappingURL=user-fixtures.js.map

package/src/auth/user-fixtures.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"user-fixtures.js","sourceRoot":"","sources":["../../../src/auth/user-fixtures.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAmGH,wCAKC;AAzFD;;GAEG;AACU,QAAA,SAAS,GAAoC;IACxD;;OAEG;IACH,KAAK,EAAE;QACL,GAAG,EAAE,WAAW;QAChB,KAAK,EAAE,kBAAkB;QACzB,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC;QAC9C,IAAI,EAAE,OAAO;KACd;IAED;;OAEG;IACH,IAAI,EAAE;QACJ,GAAG,EAAE,UAAU;QACf,KAAK,EAAE,iBAAiB;QACxB,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;QACzB,IAAI,EAAE,MAAM;KACb;IAED;;OAEG;IACH,QAAQ,EAAE;QACR,GAAG,EAAE,cAAc;QACnB,KAAK,EAAE,qBAAqB;QAC5B,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,CAAC,MAAM,CAAC;QAChB,IAAI,EAAE,UAAU;KACjB;IAED;;OAEG;IACH,SAAS,EAAE;QACT,GAAG,EAAE,UAAU;QACf,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,CAAC,WAAW,CAAC;QACrB,IAAI,EAAE,WAAW;KAClB;IAED;;OAEG;IACH,QAAQ,EAAE;QACR,GAAG,EAAE,cAAc;QACnB,KAAK,EAAE,qBAAqB;QAC5B,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,MAAM;KACb;IAED;;OAEG;IACH,SAAS,EAAE;QACT,GAAG,EAAE,eAAe;QACpB,KAAK,EAAE,sBAAsB;QAC7B,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,CAAC,eAAe,CAAC;QACzB,IAAI,EAAE,MAAM;KACb;IAED;;OAEG;IACH,aAAa,EAAE;QACb,GAAG,EAAE,mBAAmB;QACxB,KAAK,EAAE,0BAA0B;QACjC,IAAI,EAAE,qBAAqB;QAC3B,MAAM,EAAE,CAAC,gBAAgB,CAAC;QAC1B,IAAI,EAAE,MAAM;KACb;CACF,CAAC;AAEF;;GAEG;AACH,SAAgB,cAAc,CAAC,SAAqD;IAClF,OAAO;QACL,MAAM,EAAE,EAAE;QACV,GAAG,SAAS;KACb,CAAC;AACJ,CAAC","sourcesContent":["/**\n * @file user-fixtures.ts\n * @description Pre-defined test user fixtures\n */\n\nexport interface TestUserFixture {\n  /** User subject ID */\n  sub: string;\n  /** User email */\n  email?: string;\n  /** User display name */\n  name?: string;\n  /** OAuth scopes */\n  scopes: string[];\n  /** User role */\n  role?: string;\n}\n\n/**\n * Pre-defined test users for common testing scenarios\n */\nexport const TestUsers: Record<string, TestUserFixture> = {\n  /**\n   * Admin user with full access\n   */\n  admin: {\n    sub: 'admin-001',\n    email: 'admin@test.local',\n    name: 'Test Admin',\n    scopes: ['admin:*', 'read', 'write', 'delete'],\n    role: 'admin',\n  },\n\n  /**\n   * Regular user with read/write access\n   */\n  user: {\n    sub: 'user-001',\n    email: 'user@test.local',\n    name: 'Test User',\n    scopes: ['read', 'write'],\n    role: 'user',\n  },\n\n  /**\n   * Read-only user\n   */\n  readOnly: {\n    sub: 'readonly-001',\n    email: 'readonly@test.local',\n    name: 'Read Only User',\n    scopes: ['read'],\n    role: 'readonly',\n  },\n\n  /**\n   * Anonymous user\n   */\n  anonymous: {\n    sub: 'anon:001',\n    name: 'Anonymous',\n    scopes: ['anonymous'],\n    role: 'anonymous',\n  },\n\n  /**\n   * User with no scopes (for testing access denied)\n   */\n  noScopes: {\n    sub: 'noscopes-001',\n    email: 'noscopes@test.local',\n    name: 'No Scopes User',\n    scopes: [],\n    role: 'user',\n  },\n\n  /**\n   * User with only tool execution scope\n   */\n  toolsOnly: {\n    sub: 'toolsonly-001',\n    email: 'toolsonly@test.local',\n    name: 'Tools Only User',\n    scopes: ['tools:execute'],\n    role: 'user',\n  },\n\n  /**\n   * User with only resource read scope\n   */\n  resourcesOnly: {\n    sub: 'resourcesonly-001',\n    email: 'resourcesonly@test.local',\n    name: 'Resources Only User',\n    scopes: ['resources:read'],\n    role: 'user',\n  },\n};\n\n/**\n * Create a custom test user\n */\nexport function createTestUser(overrides: Partial<TestUserFixture> & { sub: string }): TestUserFixture {\n  return {\n    scopes: [],\n    ...overrides,\n  };\n}\n"]}

package/src/client/index.js

@@ -1,12 +0,0 @@
-"use strict";
-/**
- * @file client/index.ts
- * @description MCP Test Client exports
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.McpTestClientBuilder = exports.McpTestClient = void 0;
-var mcp_test_client_1 = require("./mcp-test-client");
-Object.defineProperty(exports, "McpTestClient", { enumerable: true, get: function () { return mcp_test_client_1.McpTestClient; } });
-var mcp_test_client_builder_1 = require("./mcp-test-client.builder");
-Object.defineProperty(exports, "McpTestClientBuilder", { enumerable: true, get: function () { return mcp_test_client_builder_1.McpTestClientBuilder; } });
-//# sourceMappingURL=index.js.map

package/src/client/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,qDAAkD;AAAzC,gHAAA,aAAa,OAAA;AACtB,qEAAiE;AAAxD,+HAAA,oBAAoB,OAAA","sourcesContent":["/**\n * @file client/index.ts\n * @description MCP Test Client exports\n */\n\nexport { McpTestClient } from './mcp-test-client';\nexport { McpTestClientBuilder } from './mcp-test-client.builder';\nexport type {\n  McpTestClientConfig,\n  McpResponse,\n  McpErrorInfo,\n  TestTransportType,\n  TestAuthConfig,\n  ToolResultWrapper,\n  ResourceContentWrapper,\n  PromptResultWrapper,\n  LogEntry,\n  LogLevel,\n  RequestTrace,\n  NotificationEntry,\n  ProgressUpdate,\n  SessionInfo,\n  AuthState,\n  TransportState,\n  // JSON-RPC types\n  JSONRPCRequest,\n  JSONRPCResponse,\n  // Re-exports from MCP SDK\n  InitializeResult,\n  ListToolsResult,\n  CallToolResult,\n  ListResourcesResult,\n  ReadResourceResult,\n  ListResourceTemplatesResult,\n  ListPromptsResult,\n  GetPromptResult,\n  Tool,\n  Resource,\n  ResourceTemplate,\n  Prompt,\n} from './mcp-test-client.types';\n"]}