@lifeaitools/clauth 1.5.13 → 1.5.15

package/cli/commands/serve.js

@@ -2880,17 +2880,19 @@ function createServer(initPassword, whitelist, port, tunnelHostnameInit = null,
 
     // ── OAuth Discovery (RFC 9728 + RFC 8414) ──────────────
     if (reqPath.startsWith("/.well-known/oauth-protected-resource")) {
-      const base = oauthBase();
-      // Derive resource URL from the well-known path suffix
-      // /.well-known/oauth-protected-resource       → /mcp
-      // /.well-known/oauth-protected-resource/mcp   → /mcp
-      // /.well-known/oauth-protected-resource/gws   → /gws
-      // /.well-known/oauth-protected-resource/clauth → /clauth
+      // Only advertise OAuth for /mcp — /gws and /clauth are open (no OAuth).
+      // Advertising OAuth on open paths causes claude.ai to do an OAuth dance,
+      // get a token, then have no retry context (since the original 200 wasn't a 401).
       const suffix = reqPath.replace("/.well-known/oauth-protected-resource", "").replace(/^\//, "") || "mcp";
-      const resourcePath = suffix === "sse" ? "mcp" : suffix;
+      if (suffix !== "mcp" && suffix !== "") {
+        // Path-specific OAuth metadata requested for a non-mcp path — 404 it
+        res.writeHead(404, { "Content-Type": "application/json", ...CORS });
+        return res.end(JSON.stringify({ error: "not_found" }));
+      }
+      const base = oauthBase();
       res.writeHead(200, { "Content-Type": "application/json", ...CORS });
       return res.end(JSON.stringify({
-        resource: `${base}/${resourcePath}`,
+        resource: `${base}/mcp`,
         authorization_servers: [base],
         scopes_supported: ["mcp:tools"],
         bearer_methods_supported: ["header"],
@@ -3029,41 +3031,23 @@ function createServer(initPassword, whitelist, port, tunnelHostnameInit = null,
       return "clauth";
     }
 
-    // ── MCP OAuth-protected endpoint (for claude.ai web) ──
-    // POST /mcp|/gws|/clauth — requires Bearer token; returns 401 to trigger OAuth flow
+    // ── MCP endpoint auth — log all incoming POSTs, accept with or without token ──
+    // /gws and /clauth are open (no OAuth gate) — tunnel URL is the shared secret.
+    // OAuth flow is still supported (tokens accepted when present) but not required.
     if (method === "POST" && isMcpPath) {
       const authHeader = req.headers.authorization;
-      // Detailed auth logging — helps diagnose claude.ai post-token failures
       const authLogMsg = [
         `[${new Date().toISOString()}] MCP POST ${reqPath}`,
         `  Authorization: ${authHeader ? (authHeader.startsWith("Bearer ") ? `Bearer ${authHeader.slice(7, 15)}… (known=${oauthTokens.has(authHeader.slice(7))})` : authHeader.slice(0, 30) + "…") : "(none)"}`,
         `  mcp-protocol-version: ${req.headers["mcp-protocol-version"] || "(not set)"}`,
         `  accept: ${req.headers["accept"] || "(not set)"}`,
-        `  x-forwarded-for: ${req.headers["x-forwarded-for"] || "(not set)"}`,
       ].join("\n") + "\n";
       try { fs.appendFileSync(LOG_FILE, authLogMsg); } catch {}
-
-      if (!authHeader || !authHeader.startsWith("Bearer ")) {
-        const base = oauthBase();
-        // Path-specific resource metadata URL so claude.ai gets the right resource URI
-        const pathName = reqPath === "/mcp" ? "mcp" : reqPath.slice(1);
-        res.writeHead(401, {
-          "Content-Type": "application/json",
-          "WWW-Authenticate": `Bearer resource_metadata="${base}/.well-known/oauth-protected-resource/${pathName}"`,
-          ...CORS,
-        });
-        return res.end(JSON.stringify({ error: "unauthorized" }));
-      }
-      const token = authHeader.slice(7);
-      if (!oauthTokens.has(token)) {
-        const badTokenLog = `[${new Date().toISOString()}] OAuth: REJECTED token ${token.slice(0,8)}… (pool size=${oauthTokens.size})\n`;
-        try { fs.appendFileSync(LOG_FILE, badTokenLog); } catch {}
-        res.writeHead(401, { "Content-Type": "application/json", ...CORS });
-        return res.end(JSON.stringify({ error: "invalid_token" }));
+      // Mark as remote if a valid token is present (for vault access scoping)
+      if (authHeader?.startsWith("Bearer ") && oauthTokens.has(authHeader.slice(7))) {
+        req._clauthRemote = true;
       }
-      // Token valid — mark as remote caller (claude.ai via tunnel)
-      req._clauthRemote = true;
-      // fall through to MCP handling below
+      // fall through to MCP handling — no 401 gate on these paths
     }
 
     // ── MCP Streamable HTTP transport (2025-03-26 spec) ──
@@ -3125,9 +3109,9 @@ function createServer(initPassword, whitelist, port, tunnelHostnameInit = null,
       return res.end(JSON.stringify({ jsonrpc: "2.0", id, error: { code: -32601, message: `Unknown method: ${rpcMethod}` } }));
     }
 
-    // ── MCP SSE transport (legacy) ───────────────────────
-    // GET /sse — open SSE stream, receive endpoint event
-    if (method === "GET" && reqPath === "/sse") {
+    // ── MCP SSE transport — /sse and namespaced paths ────
+    // GET /sse|/gws|/clauth — open SSE stream, receive endpoint event
+    if (method === "GET" && (reqPath === "/sse" || isMcpPath)) {
       const sessionId = `ses_${++sseCounter}_${Date.now()}`;
 
       res.writeHead(200, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lifeaitools/clauth",
-  "version": "1.5.13",
+  "version": "1.5.15",
   "description": "Hardware-bound credential vault for the LIFEAI infrastructure stack",
   "type": "module",
   "bin": {