@zuplo/runtime 6.62.9 → 6.62.11

package/out/types/index.d.ts

@@ -2574,6 +2574,29 @@ export declare interface DispatchRequestLoggerEntries<T> {
   (entries: T[]): Promise<void>;
 }
 
+/**
+ * Fetches IDP metadata from gateway service and routes to the appropriate
+ * provider-specific policy. This policy is intended only to be used in MCP
+ * Gateway projects.
+ *
+ * @title Dynamic JWT Auth
+ * @public
+ * @param request - The ZuploRequest
+ * @param context - The ZuploContext
+ * @param options - The policy options set in policies.json
+ * @param policyName - The name of the policy as set in policies.json
+ * @returns A Request or a Response
+ */
+export declare const DynamicJwtAuthInboundPolicy: InboundPolicyHandler<DynamicJwtAuthInboundPolicyOptions>;
+
+/**
+ * The options for this policy.
+ * @public
+ */
+export declare interface DynamicJwtAuthInboundPolicyOptions {}
+
+/* Excluded from this release type: DynamicOAuthProtectedResourcePlugin */
+
 declare interface DynaTraceLoggingOptions {
   url: string;
   apiToken: string;
@@ -4488,6 +4511,15 @@ export declare interface HydrolixRequestLoggerPluginOptions<T> {
   batchPeriodSeconds?: number;
 }
 
+/**
+ * Supported identity providers for authentication
+ */
+declare const IDP_PROVIDERS: {
+  readonly auth0: "auth0";
+};
+
+declare type IdpProvider = (typeof IDP_PROVIDERS)[keyof typeof IDP_PROVIDERS];
+
 /**
  * A policy that can modify the incoming HTTP request before it is sent to
  * the handler. If a response is returned, the request is short-circuited and
@@ -5201,6 +5233,10 @@ export declare interface McpGatewayConfig {
    * Array of MCP server configurations
    */
   servers: McpGatewayServerConfig[];
+  /**
+   * Metadata for the identity provider used for authentication
+   */
+  mcpIdpMetadata: McpIdpMetadata;
 }
 
 /**
@@ -5280,6 +5316,12 @@ declare interface McpGatewayTool {
   inputSchema: object;
 }
 
+declare interface McpIdpMetadata {
+  authorizationServers: string[];
+  provider: IdpProvider;
+  providerOptions: Record<string, unknown>;
+}
+
 /**
  * An MCP Server handler for Zuplo
  * Only POST requests are supported for the HTTP streamable MCP transport.
@@ -5754,20 +5796,23 @@ declare interface NotFoundOptions {
   routesMatchedByPathOnly: RouteConfiguration[];
 }
 
+/* Excluded from this release type: OAuthProtectedResourceBasePlugin */
+
+/* Excluded from this release type: OAuthProtectedResourceMetadataOptions */
+
 /**
  * Plugin for adding a route for a subset of OAuth protected resource metadata to Zuplo according to
  * RFC9728. Mostly useful for MCP Server OAuth support.
  *
  * @public
  */
-export declare class OAuthProtectedResourcePlugin extends SystemRuntimePlugin {
+export declare class OAuthProtectedResourcePlugin extends OAuthProtectedResourceBasePlugin {
   private options;
   constructor(options: OAuthProtectedResourcePluginOptions);
-  private createOauthProtectedResourceHandler;
-  registerRoutes(options: {
-    router: Router;
-    runtimeSettings: RuntimeSettings;
-  }): void;
+  protected getMetadataOptions(
+    _request: ZuploRequest,
+    _context: ZuploContext
+  ): Promise<OAuthProtectedResourceMetadataOptions>;
 }
 
 /**

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zuplo/runtime",
   "type": "module",
-  "version": "6.62.9",
+  "version": "6.62.11",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {