brightspace-mcp-server 3.9.21 → 3.9.23

package/README.md

@@ -28,14 +28,14 @@ Works with Claude Desktop, Claude Code, Cursor, ChatGPT Desktop, Windsurf, and a
    It asks for your school's Brightspace address, your username and password, and how you normally do two-factor sign-in (phone approval, authenticator code, or a browser window). Your password goes into your computer's own password store (Keychain on Mac, Credential Manager on Windows), never into a file. At the end it connects itself to Claude Desktop, Cursor, Codex, or Claude Code if you have them.
 3. **Restart your AI app and ask it something** — the first question signs you in. If your phone asks you to approve a sign-in, approve it and ask again.
 
-At one of these schools, add the flag and skip typing the address: `--purdue`, `--suny`, `--western`, `--tudelft`, `--cuny`, `--leiden`, `--javeriana`.
+At one of these schools, add the flag and skip typing the address: `--purdue`, `--suny`, `--western`, `--tudelft`, `--cuny`, `--leiden`, `--mcgill`, `--ngeeann`, `--javeriana`.
 
 **Rather have the AI install it for you?** Paste this into Claude Code, Cursor, Windsurf, Copilot, or Codex:
 
 ```
 Install brightspace-mcp-server for me by following
 https://github.com/RohanMuppa/brightspace-mcp-server/blob/main/LLMs.md
-(use --purdue at Purdue, --suny at SUNY, --tudelft at TU Delft, --cuny at CUNY, --leiden at Leiden, or --javeriana at Javeriana Cali).
+(use --purdue at Purdue, --suny at SUNY, --tudelft at TU Delft, --cuny at CUNY, --leiden at Leiden, --mcgill at McGill, --ngeeann at Ngee Ann Polytechnic, or --javeriana at Javeriana Cali).
 ```
 
 Using a different AI app? Add the command `npx -y brightspace-mcp-server@latest` to its MCP settings (on Windows: `cmd /c npx -y brightspace-mcp-server@latest`). Exact steps for each app: [docs/troubleshooting.md](docs/troubleshooting.md).
@@ -52,7 +52,9 @@ If your school uses D2L Brightspace, yes. These have automatic sign-in built in:
 | TU Delft | NetID (no two-factor) | `--tudelft` |
 | CUNY | CUNY Login, authenticator code each time | `--cuny` |
 | Leiden University | SURFconext → Microsoft | `--leiden` |
+| McGill University | Microsoft Entra | `--mcgill` |
 | Javeriana Cali | OneGate (password + authenticator code) | `--javeriana` |
+| Ngee Ann Polytechnic | Microsoft Entra | `--ngeeann` |
 | Any other D2L school | Paste your Brightspace address; if the login page isn't recognized, a browser window opens so you can sign in by hand | none |
 
 School-specific quirks: [docs/sign-in.md](docs/sign-in.md#per-school-notes).

package/build/auth/index.js

@@ -9,6 +9,7 @@ export { SunySSOFlow, isSunyBrightspace } from "./suny-sso.js";
 export { TUDelftSSOFlow, isTUDelftBrightspace } from "./tudelft-sso.js";
 export { CunySSOFlow, isCunyBrightspace } from "./cuny-sso.js";
 export { LeidenSSOFlow, isLeidenBrightspace } from "./leiden-sso.js";
+export { McgillSSOFlow, isMcgillBrightspace } from "./mcgill-sso.js";
 export { JaverianaSSOFlow, isJaverianaBrightspace } from "./javeriana-sso.js";
 export { createSSOFlow } from "./sso-flow.js";
 export { TokenManager } from "./token-manager.js";

package/build/auth/mcgill-sso.js

@@ -0,0 +1,82 @@
+/**
+ * McGill University login entry point. Licensed under MIT; see LICENSE.
+ *
+ * McGill flow ported from chrldb's mcgill-sso branch (MIT).
+ */
+import { PurdueSSOFlow } from "./purdue-sso.js";
+import { UnsupportedAuthenticationError } from "./sso-flow.js";
+const MCGILL_HOST = "mycourses2.mcgill.ca";
+export function isMcgillBrightspace(baseUrl) {
+    try {
+        return new URL(baseUrl).hostname.toLowerCase() === MCGILL_HOST;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * McGill's myCourses login page offers a "McGill" control that is really a
+ * plain anchor to `/d2l/lp/auth/saml/login`, alongside separate guest/external
+ * options. The tenant sits behind exactly one identity provider, so going
+ * straight to that SAML endpoint is simpler than depending on the control's
+ * markup, and skips it entirely. From there this reuses the shared credential
+ * and MFA flow; only McGill's first click differs.
+ */
+export class McgillSSOFlow {
+    common;
+    constructor(config) {
+        this.common = new PurdueSSOFlow(config);
+    }
+    hasCredentials() {
+        return this.common.hasCredentials();
+    }
+    rememberMfaResult() {
+        return this.common.rememberMfaResult();
+    }
+    async prepareLogin(page) {
+        await this.startSamlLogin(page);
+    }
+    async identifyAccount(page) {
+        return this.common.identifyAccount(page);
+    }
+    async login(page) {
+        await this.startSamlLogin(page);
+        return this.common.login(page);
+    }
+    /**
+     * Skip McGill's login-option page entirely by going straight to the SAML
+     * endpoint its "McGill" control would have reached. A no-op once already
+     * past it (e.g. mid-MFA, or the account picker resumed a saved IdP
+     * session), matching the other flows' idempotent prepareLogin/login calls.
+     */
+    async startSamlLogin(page) {
+        let current;
+        try {
+            current = new URL(page.url());
+        }
+        catch {
+            return;
+        }
+        if (current.protocol !== "https:" || current.hostname.toLowerCase() !== MCGILL_HOST || !current.pathname.includes("/d2l/login"))
+            return;
+        await page.goto(`${current.origin}/d2l/lp/auth/saml/login`, {
+            waitUntil: "domcontentloaded",
+            timeout: 30000,
+        });
+        // A healthy SAML endpoint redirects off mycourses2.mcgill.ca towards
+        // Microsoft Entra. If the host is unchanged, the endpoint 404'd or
+        // otherwise failed to redirect — fail fast with a clear message instead
+        // of letting the inner Microsoft sign-in flow time out looking for
+        // fields that will never appear.
+        let afterGoto;
+        try {
+            afterGoto = new URL(page.url());
+        }
+        catch {
+            return;
+        }
+        if (afterGoto.hostname.toLowerCase() === MCGILL_HOST) {
+            throw new UnsupportedAuthenticationError("McGill sign-in could not reach the SAML endpoint (mycourses2.mcgill.ca/d2l/lp/auth/saml/login stayed on the same host) — myCourses may have changed its login flow.");
+        }
+    }
+}

package/build/auth/sso-flow.js

@@ -9,6 +9,7 @@ import { WesternSSOFlow, isWesternBrightspace } from "./western-sso.js";
 import { TUDelftSSOFlow, isTUDelftBrightspace } from "./tudelft-sso.js";
 import { CunySSOFlow, isCunyBrightspace } from "./cuny-sso.js";
 import { LeidenSSOFlow, isLeidenBrightspace } from "./leiden-sso.js";
+import { McgillSSOFlow, isMcgillBrightspace } from "./mcgill-sso.js";
 import { JaverianaSSOFlow, isJaverianaBrightspace } from "./javeriana-sso.js";
 import { BrowserAuthError } from "../utils/errors.js";
 import { AUTH_COMMAND } from "../utils/commands.js";
@@ -64,6 +65,9 @@ export function createSSOFlow(config, requestMfaCode, onMfaChallenge) {
     if (isCunyBrightspace(config.baseUrl)) {
         return new CunySSOFlow(credentials);
     }
+    if (isMcgillBrightspace(config.baseUrl)) {
+        return new McgillSSOFlow(credentials);
+    }
     if (isJaverianaBrightspace(config.baseUrl)) {
         return new JaverianaSSOFlow(credentials);
     }

package/build/setup.js

@@ -66,6 +66,20 @@ export const SCHOOL_PRESETS = {
         mfaNote: "Type the 6-digit code from your authenticator app when prompted.",
         usernameHint: "Use your full CUNY Login address, e.g. firstname.lastname01@login.cuny.edu",
     },
+    ngeeann: {
+        name: "Ngee Ann Polytechnic",
+        baseUrl: "https://nplms.polite.edu.sg",
+        usernameLabel: "Ngee Ann Polytechnic account username or full email",
+        mfaNote: "Approve the sign-in request from your MFA app.",
+        usernameHint: "Use your full sign-in address if your Ngee Ann Polytechnic account requires it.",
+    },
+    mcgill: {
+        name: "McGill University",
+        baseUrl: "https://mycourses2.mcgill.ca",
+        usernameLabel: "McGill username or full email",
+        mfaNote: "Approve the sign-in request from your MFA app.",
+        usernameHint: "Use your full sign-in address if your McGill account requires it.",
+    },
     javeriana: {
         name: "Pontificia Universidad Javeriana Cali",
         baseUrl: "https://auladigital.javerianacali.edu.co",
@@ -74,7 +88,7 @@ export const SCHOOL_PRESETS = {
     },
 };
 /**
- * Pick the school preset named by `--purdue`, `--suny`, `--western`, `--cuny`, etc.
+ * Pick the school preset named by `--purdue`, `--suny`, `--western`, `--cuny`, `--mcgill`, `--ngeeann`, `--javeriana`, etc.
  *
  * Own properties only: a bare index would make `--constructor` or
  * `--__proto__` resolve to something off `Object.prototype` and hand the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brightspace-mcp-server",
-  "version": "3.9.21",
+  "version": "3.9.23",
   "mcpName": "io.github.rohanmuppa/brightspace",
   "description": "MCP server for Brightspace (D2L). Check grades, due dates, assignments, announcements, syllabus, rosters and more via Claude, ChatGPT, Cursor, Windsurf, or any MCP client.",
   "type": "module",