@leanmcp/auth 0.4.2 → 0.4.4-alpha.10.96d2437

package/README.md

@@ -27,6 +27,10 @@
   <a href="https://x.com/LeanMcp">
     <img src="https://img.shields.io/badge/@LeanMCP-f5f5f5?logo=x&logoColor=000000" />
   </a>
+  <a href="https://leanmcp.com/">
+    <img src="https://img.shields.io/badge/Website-leanmcp-0A66C2?" />
+  </a>
+  <a href="https://deepwiki.com/LeanMCP/leanmcp-sdk"><img src="https://deepwiki.com/badge.svg" alt="Ask DeepWiki"></a>
 </p>
 
 ## Features
@@ -47,16 +51,19 @@ npm install @leanmcp/auth @leanmcp/core
 ### Provider Dependencies
 
 **AWS Cognito:**
+
 ```bash
 npm install @aws-sdk/client-cognito-identity-provider axios jsonwebtoken jwk-to-pem
 ```
 
 **Clerk:**
+
 ```bash
 npm install axios jsonwebtoken jwk-to-pem
 ```
 
 **Auth0:**
+
 ```bash
 npm install axios jsonwebtoken jwk-to-pem
 ```
@@ -66,12 +73,12 @@ npm install axios jsonwebtoken jwk-to-pem
 ### 1. Initialize Auth Provider
 
 ```typescript
-import { AuthProvider } from "@leanmcp/auth";
+import { AuthProvider } from '@leanmcp/auth';
 
 const authProvider = new AuthProvider('cognito', {
   region: 'us-east-1',
   userPoolId: 'us-east-1_XXXXXXXXX',
-  clientId: 'your-client-id'
+  clientId: 'your-client-id',
 });
 
 await authProvider.init();
@@ -80,8 +87,8 @@ await authProvider.init();
 ### 2. Protect Methods with @Authenticated
 
 ```typescript
-import { Tool } from "@leanmcp/core";
-import { Authenticated } from "@leanmcp/auth";
+import { Tool } from '@leanmcp/core';
+import { Authenticated } from '@leanmcp/auth';
 
 export class SentimentService {
   @Tool({ description: 'Analyze sentiment (requires auth)' })
@@ -91,10 +98,10 @@ export class SentimentService {
     console.log('User ID:', authUser.sub);
     console.log('Email:', authUser.email);
 
-    return { 
-      sentiment: 'positive', 
+    return {
+      sentiment: 'positive',
       score: 0.8,
-      analyzedBy: authUser.sub
+      analyzedBy: authUser.sub,
     };
   }
 
@@ -143,6 +150,7 @@ async createPost(input: { title: string, content: string }) {
 ### Provider-Specific User Data
 
 **AWS Cognito:**
+
 ```typescript
 {
   sub: 'user-uuid',
@@ -154,6 +162,7 @@ async createPost(input: { title: string, content: string }) {
 ```
 
 **Clerk:**
+
 ```typescript
 {
   sub: 'user_2abc123xyz',
@@ -166,6 +175,7 @@ async createPost(input: { title: string, content: string }) {
 ```
 
 **Auth0:**
+
 ```typescript
 {
   sub: 'auth0|507f1f77bcf86cd799439011',
@@ -202,12 +212,13 @@ async tokenOnlyValidation(input: any) {
 const authProvider = new AuthProvider('cognito', {
   region: 'us-east-1',
   userPoolId: 'us-east-1_XXXXXXXXX',
-  clientId: 'your-client-id'
+  clientId: 'your-client-id',
 });
 await authProvider.init();
 ```
 
 **Environment Variables:**
+
 ```bash
 AWS_REGION=us-east-1
 COGNITO_USER_POOL_ID=us-east-1_XXXXXXXXX
@@ -220,7 +231,7 @@ COGNITO_CLIENT_ID=your-client-id
 // Session Mode (default)
 const authProvider = new AuthProvider('clerk', {
   frontendApi: 'your-frontend-api.clerk.accounts.dev',
-  secretKey: 'sk_test_...'
+  secretKey: 'sk_test_...',
 });
 
 // OAuth Mode (with refresh tokens)
@@ -229,7 +240,7 @@ const authProvider = new AuthProvider('clerk', {
   secretKey: 'sk_test_...',
   clientId: 'your-oauth-client-id',
   clientSecret: 'your-oauth-client-secret',
-  redirectUri: 'https://yourapp.com/callback'
+  redirectUri: 'https://yourapp.com/callback',
 });
 
 await authProvider.init();
@@ -242,7 +253,7 @@ const authProvider = new AuthProvider('auth0', {
   domain: 'your-tenant.auth0.com',
   clientId: 'your-client-id',
   clientSecret: 'your-client-secret',
-  audience: 'https://your-api-identifier'
+  audience: 'https://your-api-identifier',
 });
 await authProvider.init();
 ```
@@ -253,7 +264,7 @@ For LeanMCP platform deployments with user secrets support:
 
 ```typescript
 const authProvider = new AuthProvider('leanmcp', {
-  apiKey: 'your-leanmcp-api-key'
+  apiKey: 'your-leanmcp-api-key',
 });
 await authProvider.init();
 ```
@@ -266,14 +277,14 @@ Authentication tokens are passed via the `_meta` field following MCP protocol st
 
 ```typescript
 await mcpClient.callTool({
-  name: "analyzeSentiment",
-  arguments: { text: "Hello world" },
+  name: 'analyzeSentiment',
+  arguments: { text: 'Hello world' },
   _meta: {
     authorization: {
-      type: "bearer",
-      token: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
-    }
-  }
+      type: 'bearer',
+      token: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...',
+    },
+  },
 });
 ```
 
@@ -282,10 +293,10 @@ await mcpClient.callTool({
 ## Error Handling
 
 ```typescript
-import { AuthenticationError } from "@leanmcp/auth";
+import { AuthenticationError } from '@leanmcp/auth';
 
 try {
-  await service.protectedMethod({ text: "test" });
+  await service.protectedMethod({ text: 'test' });
 } catch (error) {
   if (error instanceof AuthenticationError) {
     switch (error.code) {
@@ -324,13 +335,13 @@ class AuthProvider {
 
 ```typescript
 function Authenticated(
-  authProvider: AuthProvider, 
+  authProvider: AuthProvider,
   options?: AuthenticatedOptions
 ): ClassDecorator | MethodDecorator;
 
 interface AuthenticatedOptions {
-  getUser?: boolean;   // Default: true
-  projectId?: string;  // For LeanMCP user secrets
+  getUser?: boolean; // Default: true
+  projectId?: string; // For LeanMCP user secrets
 }
 ```
 
@@ -361,17 +372,20 @@ function getAuthUser(): any;
 ## Best Practices
 
 ### Security
+
 - Always use HTTPS in production
 - Store tokens securely (keychain, encrypted storage)
 - Implement token refresh before expiration
 - Add rate limiting to protect against brute force
 
 ### Configuration
+
 - Use environment variables for credentials
 - Never hardcode secrets in code
 - Use `_meta` for auth, not business arguments
 
 ### Performance
+
 - Use `getUser: false` when you only need token validation
 - JWKS keys are cached automatically for performance
 

package/dist/{auth0-UTD4QBG6.mjs → auth0-DWCHZ7IN.mjs}

@@ -1,6 +1,6 @@
 import {
   AuthProviderBase
-} from "./chunk-P4HFKA5R.mjs";
+} from "./chunk-ZJYMG6ZM.mjs";
 import {
   __name
 } from "./chunk-LPEX4YW6.mjs";

package/dist/{chunk-RGCCBQWG.mjs → chunk-MXTUNMHA.mjs}

@@ -31,14 +31,14 @@ var MemoryStorage = class {
   tokens = /* @__PURE__ */ new Map();
   clients = /* @__PURE__ */ new Map();
   /**
-   * Normalize server URL for consistent key lookup
-   */
+  * Normalize server URL for consistent key lookup
+  */
   normalizeUrl(serverUrl) {
     return serverUrl.replace(/\/+$/, "").toLowerCase();
   }
   /**
-   * Check if an entry is expired
-   */
+  * Check if an entry is expired
+  */
   isExpired(entry) {
     if (!entry) return true;
     if (!entry.expiresAt) return false;

package/dist/{chunk-P4HFKA5R.mjs → chunk-ZJYMG6ZM.mjs}

@@ -176,25 +176,25 @@ var AuthProvider = class extends AuthProviderBase {
     const finalConfig = config || this.config;
     switch (this.providerType) {
       case "cognito": {
-        const { AuthCognito } = await import("./cognito-QQT7LK2Y.mjs");
+        const { AuthCognito } = await import("./cognito-XKPEG6UH.mjs");
         this.providerInstance = new AuthCognito();
         await this.providerInstance.init(finalConfig);
         break;
       }
       case "auth0": {
-        const { AuthAuth0 } = await import("./auth0-UTD4QBG6.mjs");
+        const { AuthAuth0 } = await import("./auth0-DWCHZ7IN.mjs");
         this.providerInstance = new AuthAuth0();
         await this.providerInstance.init(finalConfig);
         break;
       }
       case "clerk": {
-        const { AuthClerk } = await import("./clerk-3SDKGD6C.mjs");
+        const { AuthClerk } = await import("./clerk-YVTZMRLF.mjs");
         this.providerInstance = new AuthClerk();
         await this.providerInstance.init(finalConfig);
         break;
       }
       case "leanmcp": {
-        const { AuthLeanmcp } = await import("./leanmcp-Y7TXNSTD.mjs");
+        const { AuthLeanmcp } = await import("./leanmcp-73RUGZ2B.mjs");
         this.providerInstance = new AuthLeanmcp();
         await this.providerInstance.init(finalConfig);
         break;

package/dist/{clerk-3SDKGD6C.mjs → clerk-YVTZMRLF.mjs}

@@ -1,6 +1,6 @@
 import {
   AuthProviderBase
-} from "./chunk-P4HFKA5R.mjs";
+} from "./chunk-ZJYMG6ZM.mjs";
 import {
   __name
 } from "./chunk-LPEX4YW6.mjs";