@softeria/ms-365-mcp-server 0.114.4 → 0.114.6

package/dist/auth.js

@@ -1,4 +1,4 @@
-import { PublicClientApplication } from "@azure/msal-node";
+import { AuthError, PublicClientApplication } from "@azure/msal-node";
 import logger from "./logger.js";
 import { readFileSync } from "fs";
 import { fileURLToPath } from "url";
@@ -236,6 +236,13 @@ function buildScopeDiagnostics(toolScopes, allowedScopesInput) {
     extraAllowedScopesNotUsedByTools: [...allowedScopesInput].sort((a, b) => a.localeCompare(b)).filter((scope) => !isScopeUsedByTools(scope, toolPermissions))
   };
 }
+function describeAuthError(error) {
+  if (error instanceof AuthError) {
+    const suberror = error.subError ? ` / ${error.subError}` : "";
+    return `${error.errorCode}${suberror} (correlationId: ${error.correlationId || "none"}): ${error.errorMessage}`;
+  }
+  return error.message;
+}
 class AuthManager {
   constructor(config, scopes = [], expectedAccount, storage) {
     logger.info(`And scopes are ${scopes.join(", ")}`, scopes);
@@ -451,8 +458,8 @@ class AuthManager {
         this.tokenExpiry = response.expiresOn ? new Date(response.expiresOn).getTime() : null;
         await this.saveTokenCache();
         return this.accessToken;
-      } catch {
-        logger.error("Silent token acquisition failed");
+      } catch (error) {
+        logger.error(`Silent token acquisition failed: ${describeAuthError(error)}`);
         throw new Error("Silent token acquisition failed");
       }
     }
@@ -766,7 +773,8 @@ class AuthManager {
       const response = await this.msalApp.acquireTokenSilent(silentRequest);
       await this.saveTokenCache();
       return response.accessToken;
-    } catch {
+    } catch (error) {
+      logger.error(`Silent token acquisition failed: ${describeAuthError(error)}`);
       throw new Error(
         `Failed to acquire token for account '${targetAccount.username || targetAccount.name || "unknown"}'. The token may have expired. Please re-login with: --login`
       );
@@ -780,6 +788,7 @@ export {
   buildScopesFromEndpoints,
   collapseScopeHierarchy,
   auth_default as default,
+  describeAuthError,
   getEndpointRequiredScopes,
   getMissingAllowedScopes,
   getSelectedAccountPath,

package/dist/server.js

@@ -191,7 +191,7 @@ class MicrosoftGraphServer {
         const protocol = req.secure ? "https" : "http";
         const requestOrigin = `${protocol}://${req.get("host")}`;
         const browserBase = publicBase ?? requestOrigin;
-        const scopes = resolveAuthScopes(this.options);
+        const scopes = this.options.obo ? [`${this.secrets.clientId}/access_as_user`] : resolveAuthScopes(this.options);
         const metadata = {
           issuer: browserBase,
           authorization_endpoint: `${browserBase}/authorize`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softeria/ms-365-mcp-server",
-  "version": "0.114.4",
+  "version": "0.114.6",
   "description": " A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API",
   "type": "module",
   "main": "dist/index.js",