@zuplo/runtime 6.56.7 → 6.57.0

package/out/types/index.d.ts

@@ -526,6 +526,10 @@ export declare interface Auth0JwtInboundPolicyOptions {
    * The Auth0 audience of your API, for example `https://api.example.com/`.
    */
   audience?: string;
+  /**
+   *  Flag that determines whether OAuth protected resource metadata is enabled. This is useful for MCP Server OAuth support.
+   */
+  oAuthResourceMetadataEnabled?: boolean;
 }
 
 /**
@@ -5215,6 +5219,41 @@ declare interface NotFoundOptions {
   routesMatchedByPathOnly: RouteConfiguration[];
 }
 
+/**
+ * Plugin for adding a route for a subset of OAuth protected resource metadata to Zuplo according to
+ * RFC9728. Mostly useful for MCP Server OAuth support.
+ *
+ * @public
+ */
+export declare class OAuthProtectedResourcePlugin extends SystemRuntimePlugin {
+  private options;
+  constructor(options: OAuthProtectedResourcePluginOptions);
+  private createOauthProtectedResourceHandler;
+  registerRoutes(options: {
+    router: Router;
+    runtimeSettings: RuntimeSettings;
+  }): void;
+}
+
+/**
+ * Options for the OAuthProtectedResourcePlugin
+ *
+ * @public
+ */
+export declare interface OAuthProtectedResourcePluginOptions {
+  /**
+   * List of OAuth authorization server issuer identifiers that can be used with this protected resource.
+   * These should be the base URLs of authorization servers (e.g., "https://auth.example.com"). Note that
+   * the authorization servers should be compliant with RFC8414 (see https://datatracker.ietf.org/doc/html/rfc8414)
+   */
+  authorizationServers?: string[];
+  /**
+   * Human-readable name of the protected resource intended for display to end users.
+   * This field is recommended by RFC 9728.
+   */
+  resourceName?: string;
+}
+
 /**
  * Authorize requests using Okta FGA.
  *
@@ -6044,6 +6083,10 @@ export declare interface OpenIdJwtInboundPolicyOptions {
   headers?: {
     [k: string]: string;
   };
+  /**
+   *  Flag that determines whether OAuth protected resource metadata is enabled. This is useful for MCP Server OAuth support.
+   */
+  oAuthResourceMetadataEnabled?: boolean;
 }
 
 /**

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zuplo/runtime",
   "type": "module",
-  "version": "6.56.7",
+  "version": "6.57.0",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {