@nestjs/authentication 0.1.2 → 0.1.4

package/README.md

@@ -18,7 +18,7 @@
 
 ## Description
 
-Authentication module for [Nest](https://github.com/nestjs/nest): a global guard with `@Public()` and `@Authenticate()`, credential providers as ordinary injectable classes (bearer JWT, cookie sessions, your own), server-side sessions with rotation, refresh tokens, TOTP second factor, magic links, OIDC sign-in, email verification and password reset, across HTTP, GraphQL, WebSockets and microservices, with no third-party dependencies.
+Authentication module for [Nest](https://github.com/nestjs/nest): a global guard with `@Public()` and `@Authenticate()`, credential providers as ordinary injectable classes (bearer JWT, cookie sessions, your own), server-side sessions with rotation, refresh tokens, TOTP second factor, magic links, OIDC sign-in, email verification and password reset, across HTTP, GraphQL, WebSockets, microservices and MCP tool calls (`@nestjs/mcp`), with no third-party dependencies.
 
 ## Installation
 

package/dist/context/authentication-scope.service.d.ts

@@ -32,8 +32,13 @@ export declare class AuthenticationScope {
     get current(): Scope | undefined;
     run<R>(scope: Scope, fn: () => R): R;
     /**
-     * The HTTP request and response of the current call: an HTTP handler, or
-     * a GraphQL resolver whose context carries `req` (and `res`).
+     * The HTTP request and response of the current call: an HTTP handler, a
+     * GraphQL resolver whose context carries `req` (and `res`), or an
+     * `@nestjs/mcp` call that arrived over HTTP (its context, the second of
+     * its arguments, carries `request`). An MCP call has no response of its own
+     * to set cookies on: the MCP SDK writes the HTTP response. An `@nestjs/ai`
+     * agent function called in an HTTP request carries it the same way, and has
+     * no response either: the route that runs the agent owns it.
      */
     exchange(): HttpExchange | undefined;
 }

package/dist/context/authentication-scope.service.js

@@ -39,8 +39,13 @@ let AuthenticationScope = class AuthenticationScope {
         return this.storage.run(scope, fn);
     }
     /**
-     * The HTTP request and response of the current call: an HTTP handler, or
-     * a GraphQL resolver whose context carries `req` (and `res`).
+     * The HTTP request and response of the current call: an HTTP handler, a
+     * GraphQL resolver whose context carries `req` (and `res`), or an
+     * `@nestjs/mcp` call that arrived over HTTP (its context, the second of
+     * its arguments, carries `request`). An MCP call has no response of its own
+     * to set cookies on: the MCP SDK writes the HTTP response. An `@nestjs/ai`
+     * agent function called in an HTTP request carries it the same way, and has
+     * no response either: the route that runs the agent owns it.
      */
     exchange() {
         const context = this.current?.context;
@@ -53,6 +58,11 @@ let AuthenticationScope = class AuthenticationScope {
                 const gql = context.getArgByIndex(2);
                 return gql?.req ? { request: gql.req, response: gql.res } : undefined;
             }
+            case 'mcp':
+            case 'ai': {
+                const request = context.getArgByIndex(1)?.request;
+                return request?.headers ? { request } : undefined;
+            }
             default:
                 return undefined;
         }

package/dist/testing/index.js

@@ -113,16 +113,15 @@ export function authenticationStoreContract(create, options = {}) {
         // Two instances: one clock a little behind the other.
         const behind = new SessionService(storage, { session: { ...options, now: () => clock - 2_000 } });
         const ahead = new SessionService(storage, { session: { ...options, now: () => clock } });
-        for (let round = 0; round < 3; round++) {
-            const { token } = await ahead.create(uid());
-            clock += 61_000; // idle for 61 s on `ahead`, 59 s on `behind`
-            const [seenIdle, touched] = await Promise.all([ahead.validate(token), behind.validate(token)]);
-            same(seenIdle, null, 'the request that saw the session idle is refused');
-            assert.ok(touched, 'the other instance, within the idle timeout, touches the session');
-            clock += 1_000;
-            assert.ok(await ahead.validate(token), 'the touched session is still there');
-        }
-    }, concurrent);
+        const { token } = await ahead.create(uid());
+        clock += 61_000; // idle for 61 s on `ahead`, 59 s on `behind`
+        // One after the other: run together, `behind` may read and touch first, and then `ahead` rightly
+        // finds the session alive. In this order, a `validate()` that deleted what it saw idle fails below.
+        same(await ahead.validate(token), null, 'the request that saw the session idle is refused');
+        assert.ok(await behind.validate(token), 'the other instance, within the idle timeout, touches the session');
+        clock += 1_000;
+        assert.ok(await ahead.validate(token), 'the touched session is still there');
+    });
     add('sessions', 'a request racing a sign-out or a rotation never brings the session back (SessionService)', async (sources) => {
         let clock = T0;
         const sessions = new SessionService(storageOf(sources, 'sessions'), {

package/dist/utils/auth-state.util.d.ts

@@ -38,13 +38,16 @@ export declare function getRawResult(context: ExecutionContext): State | undefin
  *   (`WsAuthenticator.authenticateConnection()` stores the upgrade request
  *   there for the `ws` library)
  * - `graphql`: `context.req.headers`
+ * - `mcp`: the headers of the HTTP request the call arrived in; `undefined`
+ *   over stdio, where the MCP spec takes credentials from the environment
  * - `rpc`: `undefined`; metadata is transport specific
  */
 export declare function getRequestHeaders(context: ExecutionContext): Headers | undefined;
 /**
  * The request behind a call, as far as authentication needs it: headers,
- * and the method for HTTP and GraphQL (a WebSocket handshake has none, so
- * it counts as a safe request). `undefined` for RPC.
+ * and the method for HTTP, GraphQL, MCP and agent functions (a WebSocket
+ * handshake has none, so it counts as a safe request). `undefined` for RPC,
+ * for MCP over stdio, and for an agent function called in a job.
  */
 export declare function requestOf(context: ExecutionContext): {
     headers: Headers;

package/dist/utils/auth-state.util.js

@@ -28,12 +28,30 @@ function callKeys(context) {
     }
     return keys;
 }
+/**
+ * The context of an `@nestjs/mcp` call (a tool, resource or prompt) or of an
+ * `@nestjs/ai` agent function call, read from its arguments, `[input,
+ * context]`, so this package needs neither dependency. Its `request` is the
+ * HTTP platform's request: the one an MCP call arrived in (a plain
+ * `{ method, url, headers }` object for `@nestjs/mcp/testing`'s in-memory
+ * client), or the one the agent runs in. Absent over stdio, and in a job.
+ */
+function callContextOf(context) {
+    const call = context.getArgByIndex(1);
+    return typeof call === 'object' && call !== null ? call : undefined;
+}
 /**
  * The object that carries the result for one call, mirrored as `user` /
  * `session` where Passport-era code and `@nestjs/authorization` look:
  * the request (http), the client socket (ws), the transport context (rpc),
  * `context.req` (graphql; over graphql-ws, the socket's upgrade request, which
- * every operation of the socket shares).
+ * every operation of the socket shares), and for an MCP call (`mcp`) the HTTP
+ * request it arrived in, else (over stdio) its own context object. Each MCP
+ * request travels in an HTTP request of its own, so the request is per call,
+ * and it is the one the endpoint's route was authenticated on: a guard there
+ * and on the call authenticate once. An agent function call (`ai`) is carried
+ * the same way: the HTTP request the agent runs in, which the route that runs
+ * it authenticated, else (in a job) its own context object.
  */
 function carrierOf(context) {
     switch (context.getType()) {
@@ -47,6 +65,11 @@ function carrierOf(context) {
         }
         case 'graphql':
             return context.getArgByIndex(2)?.req;
+        case 'mcp':
+        case 'ai': {
+            const call = callContextOf(context);
+            return call?.request ?? call;
+        }
         default:
             return undefined;
     }
@@ -178,6 +201,8 @@ function stateCarrierOf(context) {
  *   (`WsAuthenticator.authenticateConnection()` stores the upgrade request
  *   there for the `ws` library)
  * - `graphql`: `context.req.headers`
+ * - `mcp`: the headers of the HTTP request the call arrived in; `undefined`
+ *   over stdio, where the MCP spec takes credentials from the environment
  * - `rpc`: `undefined`; metadata is transport specific
  */
 export function getRequestHeaders(context) {
@@ -185,8 +210,9 @@ export function getRequestHeaders(context) {
 }
 /**
  * The request behind a call, as far as authentication needs it: headers,
- * and the method for HTTP and GraphQL (a WebSocket handshake has none, so
- * it counts as a safe request). `undefined` for RPC.
+ * and the method for HTTP, GraphQL, MCP and agent functions (a WebSocket
+ * handshake has none, so it counts as a safe request). `undefined` for RPC,
+ * for MCP over stdio, and for an agent function called in a job.
  */
 export function requestOf(context) {
     switch (context.getType()) {
@@ -199,6 +225,11 @@ export function requestOf(context) {
         }
         case 'graphql':
             return context.getArgByIndex(2)?.req;
+        case 'mcp':
+        case 'ai': {
+            const request = callContextOf(context)?.request;
+            return request?.headers ? request : undefined;
+        }
         default:
             return undefined;
     }

package/dist/utils/transport-errors.util.d.ts

@@ -23,13 +23,15 @@ export declare function refusalOf(error: AuthenticationError): Refusal;
  * for `AuthenticationError`s thrown by handlers: the error each transport's
  * exception filter understands, for the refusal's status.
  *
- * - HTTP and GraphQL: Nest's own `UnauthorizedException` (or
+ * - HTTP, GraphQL and MCP: Nest's own `UnauthorizedException` (or
  *   `ForbiddenException` for a 403, `ConflictException` for a 409), with
  *   Nest's own body: `{"message":"Unauthorized","statusCode":401}`, or with a
  *   message, `{"message":"Refresh token reused","error":"Unauthorized","statusCode":401}`.
  *   A `code` is Nest's `errorCode` (on the exception, and in the body), and
  *   the description in `error` when there is a message; `details` follow.
  *   Over HTTP, `challenge` becomes the `WWW-Authenticate` header of a 401.
+ *   `@nestjs/mcp` answers a tool call's exception with a tool error carrying
+ *   its message, and a resource's or prompt's with a JSON-RPC error.
  * - ws and rpc: a `WsException` / `RpcException` carrying
  *   `{ statusCode, message }` (plus `status: 'error'` for ws, and `error`,
  *   `errorCode` and `details` as above). Those filters report

package/dist/utils/transport-errors.util.js

@@ -21,13 +21,15 @@ export function refusalOf(error) {
  * for `AuthenticationError`s thrown by handlers: the error each transport's
  * exception filter understands, for the refusal's status.
  *
- * - HTTP and GraphQL: Nest's own `UnauthorizedException` (or
+ * - HTTP, GraphQL and MCP: Nest's own `UnauthorizedException` (or
  *   `ForbiddenException` for a 403, `ConflictException` for a 409), with
  *   Nest's own body: `{"message":"Unauthorized","statusCode":401}`, or with a
  *   message, `{"message":"Refresh token reused","error":"Unauthorized","statusCode":401}`.
  *   A `code` is Nest's `errorCode` (on the exception, and in the body), and
  *   the description in `error` when there is a message; `details` follow.
  *   Over HTTP, `challenge` becomes the `WWW-Authenticate` header of a 401.
+ *   `@nestjs/mcp` answers a tool call's exception with a tool error carrying
+ *   its message, and a resource's or prompt's with a JSON-RPC error.
  * - ws and rpc: a `WsException` / `RpcException` carrying
  *   `{ statusCode, message }` (plus `status: 'error'` for ws, and `error`,
  *   `errorCode` and `details` as above). Those filters report
@@ -66,6 +68,16 @@ export async function refusal(context, { status = 401, message, code, details, c
                 adapterHost?.httpAdapter?.setHeader(context.switchToHttp().getResponse(), 'WWW-Authenticate', challenge);
             }
             break;
+        case 'mcp':
+            // Nest's own exception, as for HTTP, which `@nestjs/mcp` answers with: a tool result with `isError: true` and
+            // the message, for a tool; a JSON-RPC error with the message and the status, for a resource or a prompt. The
+            // MCP SDK writes the HTTP response, so no challenge goes with it: an MCP client learns where to sign in from
+            // the endpoint's own 401 (`@nestjs/mcp`'s `auth` option).
+            break;
+        case 'ai':
+            // Nest's own exception too, which `@nestjs/ai` gives the model as the function's error. The route that runs
+            // the agent owns the HTTP response, so no challenge goes with it.
+            break;
     }
     const Exception = status === 409 ? ConflictException : status === 403 ? ForbiddenException : UnauthorizedException;
     // Nest builds the body: `error` is the code (the description) or the status phrase, then `errorCode`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nestjs/authentication",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "Nest - modern, fast, powerful node.js web framework (@authentication)",
   "author": "Kamil Mysliwiec",
   "license": "MIT",
@@ -46,21 +46,21 @@
     "@electric-sql/pglite": "0.5.8",
     "@electric-sql/pglite-socket": "0.2.11",
     "@nestjs/apollo": "14.0.1",
-    "@nestjs/authorization": "0.1.0",
-    "@nestjs/common": "12.2.0",
-    "@nestjs/core": "12.2.0",
+    "@nestjs/authorization": "0.1.1",
+    "@nestjs/common": "12.3.3",
+    "@nestjs/core": "12.3.3",
     "@nestjs/drizzle": "0.0.2",
     "@nestjs/graphql": "14.0.1",
-    "@nestjs/idempotency": "0.0.2",
+    "@nestjs/idempotency": "0.0.3",
     "@nestjs/mail": "0.0.1",
-    "@nestjs/microservices": "12.2.0",
-    "@nestjs/platform-express": "12.2.0",
-    "@nestjs/platform-fastify": "12.2.0",
-    "@nestjs/platform-ws": "12.2.0",
-    "@nestjs/resilience": "0.0.2",
-    "@nestjs/testing": "12.2.0",
+    "@nestjs/microservices": "12.3.3",
+    "@nestjs/platform-express": "12.3.3",
+    "@nestjs/platform-fastify": "12.3.3",
+    "@nestjs/platform-ws": "12.3.3",
+    "@nestjs/resilience": "0.0.3",
+    "@nestjs/testing": "12.3.3",
     "@nestjs/throttler": "6.7.1",
-    "@nestjs/websockets": "12.2.0",
+    "@nestjs/websockets": "12.3.3",
     "@types/node": "24.19.2",
     "@types/pg": "8.23.1",
     "@types/supertest": "7.2.1",
@@ -69,18 +69,18 @@
     "graphql": "16.14.2",
     "husky": "9.1.7",
     "lint-staged": "17.6.0",
-    "oxlint": "1.89.0",
+    "oxlint": "1.91.0",
     "pg": "8.23.1",
     "prettier": "3.9.10",
     "reflect-metadata": "0.2.2",
-    "release-it": "21.1.1",
+    "release-it": "21.1.2",
     "rxjs": "7.8.2",
     "supertest": "7.3.1",
     "typeorm": "1.1.2",
     "typescript": "7.0.2",
     "vite": "8.3.5",
-    "vitest": "5.0.5",
-    "ws": "8.22.0"
+    "vitest": "5.1.0",
+    "ws": "8.22.1"
   },
   "peerDependencies": {
     "@nestjs/common": "^12.0.0",