@office-ai/aioncli-core 0.2.3 → 0.18.4

package/dist/src/mcp/oauth-provider.d.ts

@@ -3,7 +3,10 @@
  * Copyright 2025 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
-import { MCPOAuthToken } from './oauth-token-storage.js';
+import type { EventEmitter } from 'node:events';
+import type { OAuthToken } from './token-storage/types.js';
+import { MCPOAuthTokenStorage } from './oauth-token-storage.js';
+export declare const OAUTH_DISPLAY_MESSAGE_EVENT: "oauth-display-message";
 /**
  * OAuth configuration for an MCP server.
  */
@@ -17,6 +20,7 @@ export interface MCPOAuthConfig {
     audiences?: string[];
     redirectUri?: string;
     tokenParamName?: string;
+    registrationUrl?: string;
 }
 /**
  * OAuth authorization response.
@@ -36,7 +40,7 @@ export interface OAuthTokenResponse {
     scope?: string;
 }
 /**
- * Dynamic client registration request.
+ * Dynamic client registration request (RFC 7591).
  */
 export interface OAuthClientRegistrationRequest {
     client_name: string;
@@ -44,11 +48,10 @@ export interface OAuthClientRegistrationRequest {
     grant_types: string[];
     response_types: string[];
     token_endpoint_auth_method: string;
-    code_challenge_method?: string[];
     scope?: string;
 }
 /**
- * Dynamic client registration response.
+ * Dynamic client registration response (RFC 7591).
  */
 export interface OAuthClientRegistrationResponse {
     client_id: string;
@@ -59,63 +62,66 @@ export interface OAuthClientRegistrationResponse {
     grant_types: string[];
     response_types: string[];
     token_endpoint_auth_method: string;
-    code_challenge_method?: string[];
     scope?: string;
 }
 /**
  * Provider for handling OAuth authentication for MCP servers.
  */
 export declare class MCPOAuthProvider {
-    private static readonly REDIRECT_PORT;
-    private static readonly REDIRECT_PATH;
-    private static readonly HTTP_OK;
+    private readonly tokenStorage;
+    constructor(tokenStorage?: MCPOAuthTokenStorage);
     /**
      * Register a client dynamically with the OAuth server.
      *
      * @param registrationUrl The client registration endpoint URL
      * @param config OAuth configuration
+     * @param redirectPort The port to use for the redirect URI
      * @returns The registered client information
      */
-    private static registerClient;
+    private registerClient;
     /**
      * Discover OAuth configuration from an MCP server URL.
      *
      * @param mcpServerUrl The MCP server URL
      * @returns OAuth configuration if discovered, null otherwise
      */
-    private static discoverOAuthFromMCPServer;
+    private discoverOAuthFromMCPServer;
+    private discoverAuthServerMetadataForRegistration;
     /**
      * Generate PKCE parameters for OAuth flow.
      *
      * @returns PKCE parameters including code verifier, challenge, and state
      */
-    private static generatePKCEParams;
+    private generatePKCEParams;
     /**
      * Start a local HTTP server to handle OAuth callback.
+     * The server will listen on the specified port (or port 0 for OS assignment).
      *
      * @param expectedState The state parameter to validate
-     * @returns Promise that resolves with the authorization code
+     * @returns Object containing the port (available immediately) and a promise for the auth response
      */
-    private static startCallbackServer;
+    private startCallbackServer;
     /**
      * Build the authorization URL with PKCE parameters.
      *
      * @param config OAuth configuration
      * @param pkceParams PKCE parameters
+     * @param redirectPort The port to use for the redirect URI
      * @param mcpServerUrl The MCP server URL to use as the resource parameter
      * @returns The authorization URL
      */
-    private static buildAuthorizationUrl;
+    private buildAuthorizationUrl;
     /**
      * Exchange authorization code for tokens.
      *
      * @param config OAuth configuration
      * @param code Authorization code
      * @param codeVerifier PKCE code verifier
+     * @param redirectPort The port to use for the redirect URI
      * @param mcpServerUrl The MCP server URL to use as the resource parameter
      * @returns The token response
      */
-    private static exchangeCodeForToken;
+    private exchangeCodeForToken;
     /**
      * Refresh an access token using a refresh token.
      *
@@ -125,16 +131,17 @@ export declare class MCPOAuthProvider {
      * @param mcpServerUrl The MCP server URL to use as the resource parameter
      * @returns The new token response
      */
-    static refreshAccessToken(config: MCPOAuthConfig, refreshToken: string, tokenUrl: string, mcpServerUrl?: string): Promise<OAuthTokenResponse>;
+    refreshAccessToken(config: MCPOAuthConfig, refreshToken: string, tokenUrl: string, mcpServerUrl?: string): Promise<OAuthTokenResponse>;
     /**
      * Perform the full OAuth authorization code flow with PKCE.
      *
      * @param serverName The name of the MCP server
      * @param config OAuth configuration
      * @param mcpServerUrl Optional MCP server URL for OAuth discovery
+     * @param messageHandler Optional handler for displaying user-facing messages
      * @returns The obtained OAuth token
      */
-    static authenticate(serverName: string, config: MCPOAuthConfig, mcpServerUrl?: string): Promise<MCPOAuthToken>;
+    authenticate(serverName: string, config: MCPOAuthConfig, mcpServerUrl?: string, events?: EventEmitter): Promise<OAuthToken>;
     /**
      * Get a valid access token for an MCP server, refreshing if necessary.
      *
@@ -142,5 +149,5 @@ export declare class MCPOAuthProvider {
      * @param config OAuth configuration
      * @returns A valid access token or null if not authenticated
      */
-    static getValidToken(serverName: string, config: MCPOAuthConfig): Promise<string | null>;
+    getValidToken(serverName: string, config: MCPOAuthConfig): Promise<string | null>;
 }