@mcp-weave/webui 0.1.1 → 0.2.0

package/dist/index.mjs

@@ -1123,7 +1123,8 @@ import {
   getServerMetadata,
   getToolsMetadata,
   getResourcesMetadata,
-  getPromptsMetadata
+  getPromptsMetadata,
+  createAuthMiddleware
 } from "@mcp-weave/nestjs";
 var McpWebUI = class extends EventEmitter {
   serverClass;
@@ -1133,6 +1134,7 @@ var McpWebUI = class extends EventEmitter {
   serverInfo = null;
   callHistory = [];
   logs = [];
+  authMiddleware;
   constructor(serverClass, options = {}) {
     super();
     if (!isMcpServer(serverClass)) {
@@ -1144,8 +1146,10 @@ var McpWebUI = class extends EventEmitter {
       host: options.host ?? "localhost",
       title: options.title ?? "MCP Server Dashboard",
       theme: options.theme ?? "dark",
-      enableLogs: options.enableLogs ?? true
+      enableLogs: options.enableLogs ?? true,
+      auth: options.auth
     };
+    this.authMiddleware = createAuthMiddleware(options.auth);
   }
   /**
    * Initialize server instance and extract metadata
@@ -1250,12 +1254,12 @@ var McpWebUI = class extends EventEmitter {
   /**
    * Handle HTTP requests
    */
-  handleRequest(req, res) {
+  async handleRequest(req, res) {
     const parsedUrl = url.parse(req.url ?? "/", true);
     const pathname = parsedUrl.pathname ?? "/";
     res.setHeader("Access-Control-Allow-Origin", "*");
     res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
-    res.setHeader("Access-Control-Allow-Headers", "Content-Type");
+    res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization, X-Api-Key");
     if (req.method === "OPTIONS") {
       res.writeHead(200);
       res.end();
@@ -1263,7 +1267,19 @@ var McpWebUI = class extends EventEmitter {
     }
     if (pathname === "/" && req.method === "GET") {
       this.serveDashboard(res);
-    } else if (pathname === "/api/info" && req.method === "GET") {
+      return;
+    }
+    if (pathname.startsWith("/api/")) {
+      const authResult = await this.authMiddleware(req, res);
+      if (!authResult) return;
+      if (this.options.auth?.enabled) {
+        this.log(
+          `[${authResult.requestId}] ${authResult.auth.clientName ?? authResult.auth.clientId} - ${req.method} ${pathname}`
+        );
+      }
+      res.setHeader("X-Request-Id", authResult.requestId);
+    }
+    if (pathname === "/api/info" && req.method === "GET") {
       this.serveServerInfo(res);
     } else if (pathname === "/api/tools" && req.method === "GET") {
       this.serveTools(res);
@@ -1299,7 +1315,12 @@ var McpWebUI = class extends EventEmitter {
    */
   serveServerInfo(res) {
     res.writeHead(200, { "Content-Type": "application/json" });
-    res.end(JSON.stringify(this.serverInfo));
+    res.end(
+      JSON.stringify({
+        ...this.serverInfo,
+        authEnabled: this.options.auth?.enabled ?? false
+      })
+    );
   }
   /**
    * Serve tools list