@tmcp/transport-http 0.4.2 → 0.5.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tmcp/transport-http",
-  "version": "0.4.2",
+  "version": "0.5.1",
   "description": "Transport for TMCP using HTTP",
   "type": "module",
   "main": "src/index.js",
@@ -16,7 +16,7 @@
     "src/**/*"
   ],
   "peerDependencies": {
-    "tmcp": "^1.8.1"
+    "tmcp": "^1.9.0"
   },
   "keywords": [
     "tmcp",
@@ -36,7 +36,8 @@
     "valibot": "^1.1.0",
     "vitest": "^3.2.4",
     "@tmcp/adapter-valibot": "^0.1.3",
-    "tmcp": "^1.8.1"
+    "@tmcp/auth": "^0.3.1",
+    "tmcp": "^1.9.0"
   },
   "publishConfig": {
     "access": "public"

package/src/index.js

@@ -1,16 +1,17 @@
 /**
- * @import { McpServer, ClientCapabilities } from "tmcp";
+ * @import { AuthInfo, McpServer } from "tmcp";
+ * @import { OAuth  } from "@tmcp/auth";
  */
 
 /**
  * @typedef {{
  * 	getSessionId?: () => string
  * 	path?: string
+ * 	oauth?: OAuth<"built">
  * }} HttpTransportOptions
  */
 
 import { AsyncLocalStorage } from 'node:async_hooks';
-
 export class HttpTransport {
 	/**
 	 * @type {McpServer<any>}
@@ -18,7 +19,7 @@ export class HttpTransport {
 	#server;
 
 	/**
-	 * @type {Required<HttpTransportOptions>}
+	 * @type {Required<Omit<HttpTransportOptions, 'oauth'>>}
 	 */
 	#options;
 
@@ -41,6 +42,11 @@ export class HttpTransport {
 	 */
 	#controller_storage = new AsyncLocalStorage();
 
+	/**
+	 * @type {OAuth<"built"> | undefined}
+	 */
+	#oauth;
+
 	/**
 	 *
 	 * @param {McpServer<any>} server
@@ -48,18 +54,25 @@ export class HttpTransport {
 	 */
 	constructor(server, options) {
 		this.#server = server;
-		const { getSessionId = () => crypto.randomUUID(), path = '/mcp' } =
-			options ?? {
-				getSessionId: () => crypto.randomUUID(),
-			};
+		const {
+			getSessionId = () => crypto.randomUUID(),
+			path = '/mcp',
+			oauth,
+		} = options ?? {
+			getSessionId: () => crypto.randomUUID(),
+		};
+
+		if (oauth) {
+			this.#oauth = oauth;
+		}
+
 		this.#options = { getSessionId, path };
 		this.#path = path;
 		this.#server.on('send', ({ request, context: { sessions } }) => {
 			// use the current controller if the request has an id (it means it's a request and not a notification)
 			if (request.id != null) {
 				const controller = this.#controller_storage.getStore();
-				if (!controller)
-					throw new Error('Controller not found in storage');
+				if (!controller) return;
 
 				controller.enqueue('data: ' + JSON.stringify(request) + '\n\n');
 				return;
@@ -150,8 +163,9 @@ export class HttpTransport {
 	 *
 	 * @param {string} session_id
 	 * @param {Request} request
+	 * @param {AuthInfo | null} auth_info
 	 */
-	async #handle_post(session_id, request) {
+	async #handle_post(session_id, request, auth_info) {
 		// Check Content-Type header
 		const content_type = request.headers.get('content-type');
 		if (!content_type || !content_type.includes('application/json')) {
@@ -192,7 +206,11 @@ export class HttpTransport {
 			const handle = async () => {
 				const response = await this.#controller_storage.run(
 					controller,
-					() => this.#server.receive(body, session_id),
+					() =>
+						this.#server.receive(body, {
+							sessionId: session_id,
+							auth: auth_info ?? undefined,
+						}),
 				);
 
 				controller?.enqueue(
@@ -274,10 +292,38 @@ export class HttpTransport {
 	async respond(request) {
 		const url = new URL(request.url);
 
+		/**
+		 * @type {AuthInfo | null}
+		 */
+		let auth_info = null;
+
+		// Check if OAuth helper should handle this request
+		if (this.#oauth) {
+			try {
+				const response = await this.#oauth.respond(request);
+				if (response) {
+					return response;
+				}
+			} catch (error) {
+				return new Response(
+					JSON.stringify({
+						error: 'server_error',
+						error_description: /** @type {Error} */ (error).message,
+					}),
+					{
+						status: 500,
+						headers: { 'Content-Type': 'application/json' },
+					},
+				);
+			}
+			auth_info = await this.#oauth.verify(request);
+		}
+
 		// Check if the request path matches the configured MCP path
 		if (url.pathname !== this.#path) {
 			return null;
 		}
+
 		const method = request.method;
 		const session_id =
 			request.headers.get('mcp-session-id') ||
@@ -295,7 +341,7 @@ export class HttpTransport {
 
 		// Handle POST request - process message and respond through event stream
 		if (method === 'POST') {
-			return this.#handle_post(session_id, request);
+			return this.#handle_post(session_id, request, auth_info);
 		}
 
 		// Method not supported

package/src/types/index.d.ts

@@ -1,5 +1,6 @@
 declare module '@tmcp/transport-http' {
 	import type { McpServer } from 'tmcp';
+	import type { OAuth } from '@tmcp/auth';
 	export class HttpTransport {
 		
 		constructor(server: McpServer<any>, options?: HttpTransportOptions);
@@ -10,6 +11,7 @@ declare module '@tmcp/transport-http' {
 	export type HttpTransportOptions = {
 		getSessionId?: () => string;
 		path?: string;
+		oauth?: OAuth<"built">;
 	};
 
 	export {};

package/src/types/index.d.ts.map

@@ -10,6 +10,6 @@
 	"sourcesContent": [
 		null
 	],
-	"mappings": ";;cAaaA,aAAaA",
+	"mappings": ";;;cAcaA,aAAaA",
 	"ignoreList": []
 }