@mcp-abap-adt/header-validator 0.1.0 → 0.1.2

package/CHANGELOG.md

@@ -5,6 +5,21 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.1.2] - 2025-11-30
+
+### Changed
+- **Improved header validation logic** - Absence of headers is no longer treated as an error (allows .env file usage)
+- **MCP destination validation** - `validateMcpDestinationAuth` now accepts optional `sapUrl` parameter and validates it internally
+- **Better error handling** - Validator returns empty errors array when no headers provided (not an error, user may use .env file)
+
+### Fixed
+- **Test updates** - Updated tests to reflect new validation logic where missing headers are not errors
+
+## [0.1.1] - 2025-11-30
+
+### Fixed
+- Initial published version
+
 ## [0.1.0] - 2025-11-30
 
 ### Added

package/dist/headerValidator.js

@@ -94,6 +94,7 @@ function validateSapDestinationAuth(headers) {
 /**
  * Validate MCP destination-based authentication (medium-high priority)
  * x-mcp-destination - uses AuthBroker, always JWT (no x-sap-auth-type needed)
+ * x-sap-url is required for MCP destination (unlike x-sap-destination)
  */
 function validateMcpDestinationAuth(headers, sapUrl) {
     const destinationRaw = headers['x-mcp-destination'];
@@ -109,7 +110,18 @@ function validateMcpDestinationAuth(headers, sapUrl) {
         return {
             priority: types_1.AuthMethodPriority.NONE,
             authType: 'jwt', // MCP destination always uses JWT
-            sapUrl,
+            sapUrl: sapUrl || '',
+            errors,
+            warnings,
+        };
+    }
+    // x-sap-url is required for MCP destination
+    if (!sapUrl) {
+        errors.push('x-sap-url header is required when x-mcp-destination is present');
+        return {
+            priority: types_1.AuthMethodPriority.NONE,
+            authType: 'jwt',
+            sapUrl: '',
             errors,
             warnings,
         };
@@ -224,11 +236,11 @@ function validateBasicAuth(headers, sapUrl, authType) {
  * @returns Validation result with prioritized authentication configuration
  */
 function validateAuthHeaders(headers) {
-    // No headers provided
+    // No headers provided - this is not an error, user may be using .env file
     if (!headers) {
         return {
             isValid: false,
-            errors: ['No headers provided'],
+            errors: [],
             warnings: [],
         };
     }
@@ -255,24 +267,44 @@ function validateAuthHeaders(headers) {
             };
         }
     }
-    // For other auth methods, x-sap-url is required
+    // For other auth methods, x-sap-url is required (but MCP destination can work without it if URL is optional)
     const sapUrl = getHeaderValue(headers, 'x-sap-url');
-    // Validate required headers
-    if (!sapUrl) {
-        errors.push('x-sap-url header is required when x-sap-destination is not present');
-        return {
-            isValid: false,
-            errors,
-            warnings,
-        };
+    // Check for MCP destination (requires x-sap-url header)
+    if (sapUrl) {
+        // Validate URL format first
+        if (!isValidUrl(sapUrl)) {
+            errors.push(`x-sap-url is not a valid URL: ${sapUrl}`);
+            return {
+                isValid: false,
+                errors,
+                warnings,
+            };
+        }
+        const mcpDestinationConfig = validateMcpDestinationAuth(headers, sapUrl);
+        if (mcpDestinationConfig) {
+            if (mcpDestinationConfig.errors.length === 0) {
+                return {
+                    isValid: true,
+                    config: mcpDestinationConfig,
+                    errors: [],
+                    warnings: mcpDestinationConfig.warnings,
+                };
+            }
+            else {
+                return {
+                    isValid: false,
+                    errors: mcpDestinationConfig.errors,
+                    warnings: mcpDestinationConfig.warnings,
+                };
+            }
+        }
     }
-    // Validate URL format
-    if (!isValidUrl(sapUrl)) {
-        errors.push(`x-sap-url is not a valid URL: ${sapUrl}`);
+    // If no auth headers at all, return empty result (not an error - may use .env file)
+    if (!sapUrl) {
         return {
             isValid: false,
-            errors,
-            warnings,
+            errors: [],
+            warnings: [],
         };
     }
     // Try to validate authentication methods in priority order

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcp-abap-adt/header-validator",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Header validator for MCP ABAP ADT - validates and prioritizes authentication headers",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",