fastmcp 4.16.14 → 4.17.1

package/dist/{chunk-YZWUEW3A.cjs → chunk-E3HXGE2O.cjs}

@@ -72,9 +72,11 @@ var proxyDcrClientStorageSchema = _zod.z.object({
   callbackUrl: _zod.z.string(),
   clientId: _zod.z.string(),
   clientSecret: _zod.z.string().optional(),
+  expiresAt: storedDateSchema.optional(),
   metadata: dcrClientMetadataSchema.optional(),
   redirectUris: _zod.z.array(_zod.z.string()),
-  registeredAt: storedDateSchema
+  registeredAt: storedDateSchema,
+  source: _zod.z.literal("cimd").optional()
 });
 var upstreamTokenSetStorageSchema = _zod.z.object({
   accessToken: _zod.z.string(),
@@ -172,10 +174,18 @@ var OAuthProxyStateStore = class {
       `${STORAGE_KEY_PREFIX.transaction}${transactionId}`
     );
   }
+  /**
+   * A client carrying `expiresAt` is a cached resolution rather than a
+   * permanent registration (CIMD), so a lapsed copy is dropped and reported as
+   * a miss — the caller re-resolves it from the source of truth.
+   */
   async getRegisteredClientByClientId(clientId) {
     const cached = this.registeredClientsByClientId.get(clientId);
     if (cached) {
-      return cached;
+      if (!cached.expiresAt || !this.isExpired(cached.expiresAt)) {
+        return cached;
+      }
+      this.registeredClientsByClientId.delete(clientId);
     }
     const stored = await this.tokenStorage.get(
       `${STORAGE_KEY_PREFIX.client}${clientId}`
@@ -184,6 +194,10 @@ var OAuthProxyStateStore = class {
     if (!parsed.success) {
       return null;
     }
+    if (parsed.data.expiresAt && this.isExpired(parsed.data.expiresAt)) {
+      await this.tokenStorage.delete(`${STORAGE_KEY_PREFIX.client}${clientId}`);
+      return null;
+    }
     this.cacheRegisteredClient(parsed.data);
     return parsed.data;
   }
@@ -205,12 +219,6 @@ var OAuthProxyStateStore = class {
     }
     return parsed.data;
   }
-  async isTransactionCallbackRegistered(transaction) {
-    const registeredClient = await this.getRegisteredClientByClientId(
-      transaction.clientId
-    );
-    return _nullishCoalesce(_optionalChain([registeredClient, 'optionalAccess', _ => _.redirectUris, 'access', _2 => _2.includes, 'call', _3 => _3(transaction.clientCallbackUrl)]), () => ( false));
-  }
   /**
    * Record that an authorization code has been redeemed, so a later attempt
    * gets "already used" rather than looking like an unknown code. Keyed and
@@ -233,7 +241,8 @@ var OAuthProxyStateStore = class {
   async saveRegisteredClient(client) {
     await this.tokenStorage.save(
       `${STORAGE_KEY_PREFIX.client}${client.clientId}`,
-      client
+      client,
+      client.expiresAt ? this.getTtlSeconds(client.expiresAt) : void 0
     );
   }
   async saveTransaction(transaction) {
@@ -276,6 +285,173 @@ var DEFAULT_AUTHORIZATION_CODE_TTL = 300;
 var DEFAULT_TRANSACTION_TTL = 600;
 var DEFAULT_UPSTREAM_REQUEST_TIMEOUT_MS = 1e4;
 
+// src/auth/utils/cimd.ts
+var CIMD_FETCH_TIMEOUT_MS = 5e3;
+var CIMD_CLIENT_TTL_MS = 15 * 60 * 1e3;
+var CIMD_MAX_RESPONSE_BYTES = 65536;
+async function resolveCimdClient(clientId, requestedRedirectUri, validateRedirectUri) {
+  let url;
+  try {
+    url = new URL(clientId);
+  } catch (e) {
+    return null;
+  }
+  if (url.protocol !== "https:" || url.search) {
+    return null;
+  }
+  if (isPrivateOrLoopbackHost(url.hostname)) {
+    return null;
+  }
+  let response;
+  try {
+    response = await fetch(clientId, {
+      redirect: "error",
+      signal: AbortSignal.timeout(CIMD_FETCH_TIMEOUT_MS)
+    });
+  } catch (e2) {
+    return null;
+  }
+  if (!response.ok) {
+    return null;
+  }
+  const text = await readBoundedText(response);
+  if (text === null) {
+    return null;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch (e3) {
+    return null;
+  }
+  if (typeof parsed !== "object" || parsed === null) {
+    return null;
+  }
+  const doc = parsed;
+  if (doc.client_id !== clientId) {
+    return null;
+  }
+  if (!isStringArray(doc.redirect_uris) || doc.redirect_uris.length === 0) {
+    return null;
+  }
+  const redirectUris = doc.redirect_uris;
+  if (requestedRedirectUri && !redirectUris.includes(requestedRedirectUri)) {
+    return null;
+  }
+  if (!redirectUris.every((uri) => validateRedirectUri(uri))) {
+    return null;
+  }
+  const metadata = {
+    client_name: optionalString(doc.client_name),
+    client_uri: optionalString(doc.client_uri),
+    logo_uri: optionalString(doc.logo_uri),
+    policy_uri: optionalString(doc.policy_uri),
+    scope: optionalString(doc.scope),
+    tos_uri: optionalString(doc.tos_uri)
+  };
+  return {
+    callbackUrl: redirectUris[0],
+    clientId,
+    // CIMD is a public-client mechanism secured by PKCE; there is no secret.
+    clientSecret: void 0,
+    expiresAt: new Date(Date.now() + CIMD_CLIENT_TTL_MS),
+    metadata,
+    redirectUris,
+    registeredAt: /* @__PURE__ */ new Date(),
+    source: "cimd"
+  };
+}
+function expandIPv6(host) {
+  const sides = host.split("::");
+  if (sides.length > 2) {
+    return null;
+  }
+  const head = sides[0] ? sides[0].split(":") : [];
+  const tail = sides.length === 2 && sides[1] ? sides[1].split(":") : [];
+  if (sides.length === 1 && head.length !== 8) {
+    return null;
+  }
+  const missing = 8 - head.length - tail.length;
+  if (missing < 0) {
+    return null;
+  }
+  const parts = [...head, ...Array(missing).fill("0"), ...tail];
+  if (parts.length !== 8) {
+    return null;
+  }
+  const groups = parts.map((g) => Number.parseInt(g || "0", 16));
+  return groups.every((g) => !Number.isNaN(g)) ? groups : null;
+}
+function isPrivateOrLoopbackHost(hostname) {
+  const host = hostname.toLowerCase().replace(/^\[|\]$/g, "");
+  if (host === "localhost" || host === "0.0.0.0") {
+    return true;
+  }
+  if (host.includes(":")) {
+    return isPrivateOrLoopbackIPv6(host);
+  }
+  return host === "127.0.0.1" || /^169\.254\./.test(host) || /^10\./.test(host) || /^192\.168\./.test(host) || /^172\.(1[6-9]|2\d|3[01])\./.test(host);
+}
+function isPrivateOrLoopbackIPv6(host) {
+  const groups = expandIPv6(host);
+  if (!groups) {
+    return false;
+  }
+  if (groups.every((g) => g === 0)) {
+    return true;
+  }
+  if (groups.slice(0, 7).every((g) => g === 0) && groups[7] === 1) {
+    return true;
+  }
+  const [first] = groups;
+  if ((first & 65472) === 65152) {
+    return true;
+  }
+  if ((first & 65024) === 64512) {
+    return true;
+  }
+  if (groups[0] === 0 && groups[1] === 0 && groups[2] === 0 && groups[3] === 0 && groups[4] === 0 && (groups[5] === 0 || groups[5] === 65535)) {
+    const ipv4 = `${groups[6] >> 8}.${groups[6] & 255}.${groups[7] >> 8}.${groups[7] & 255}`;
+    return isPrivateOrLoopbackHost(ipv4);
+  }
+  return false;
+}
+function isStringArray(value) {
+  return Array.isArray(value) && value.every((item) => typeof item === "string");
+}
+function optionalString(value) {
+  return typeof value === "string" ? value : void 0;
+}
+async function readBoundedText(response) {
+  const contentLength = response.headers.get("content-length");
+  if (contentLength && Number(contentLength) > CIMD_MAX_RESPONSE_BYTES) {
+    return null;
+  }
+  const reader = _optionalChain([response, 'access', _ => _.body, 'optionalAccess', _2 => _2.getReader, 'call', _3 => _3()]);
+  if (!reader) {
+    return null;
+  }
+  const chunks = [];
+  let totalBytes = 0;
+  try {
+    for (; ; ) {
+      const { done, value } = await reader.read();
+      if (done) {
+        break;
+      }
+      totalBytes += value.byteLength;
+      if (totalBytes > CIMD_MAX_RESPONSE_BYTES) {
+        await reader.cancel();
+        return null;
+      }
+      chunks.push(value);
+    }
+  } catch (e4) {
+    return null;
+  }
+  return Buffer.concat(chunks).toString("utf-8");
+}
+
 // src/auth/utils/claimsExtractor.ts
 var ClaimsExtractor = (_class = class {
   
@@ -413,7 +589,7 @@ var ClaimsExtractor = (_class = class {
         const stringified = JSON.stringify(value);
         const maxSize = _nullishCoalesce(this.config.maxClaimValueSize, () => ( 2e3));
         return stringified.length <= maxSize;
-      } catch (e) {
+      } catch (e5) {
         return false;
       }
     }
@@ -694,7 +870,7 @@ var ConsentManager = class {
         return null;
       }
       return data;
-    } catch (e2) {
+    } catch (e6) {
       return null;
     }
   }
@@ -1155,9 +1331,13 @@ var OAuthProxy = (_class4 = class {
   __init7() {this.ownedTokenStorage = null}
   /**
    * Keyed by proxy-issued client_id for authorize/token-exchange lookups and
-   * for the defence-in-depth callback checks. A registration never changes
+   * for the defence-in-depth callback checks. A DCR registration never changes
    * after it is written, so caching it locally cannot go stale; it is also
    * persisted, so another instance can hydrate it.
+   *
+   * A CIMD client is not a registration but a snapshot of a document that can
+   * change under us, so it is cached with an `expiresAt` and re-resolved once
+   * that passes.
    */
   __init8() {this.registeredClientsByClientId = /* @__PURE__ */ new Map()}
   
@@ -1167,6 +1347,7 @@ var OAuthProxy = (_class4 = class {
       allowPlainPkce: true,
       authorizationCodeTtl: DEFAULT_AUTHORIZATION_CODE_TTL,
       consentRequired: true,
+      enableCimd: false,
       enableTokenSwap: true,
       // Enabled by default for security
       redirectPath: "/oauth/callback",
@@ -1223,7 +1404,10 @@ var OAuthProxy = (_class4 = class {
         "Only 'code' response type is supported"
       );
     }
-    const registeredClient = await this.stateStore.getRegisteredClientByClientId(params.client_id);
+    const registeredClient = await this.resolveClient(
+      params.client_id,
+      params.redirect_uri
+    );
     if (!registeredClient) {
       throw new OAuthProxyError("invalid_client", "Unknown client_id");
     }
@@ -1245,6 +1429,20 @@ var OAuthProxy = (_class4 = class {
         "code_challenge_method 'plain' is not supported; use S256"
       );
     }
+    if (registeredClient.source === "cimd") {
+      if (!params.code_challenge) {
+        throw new OAuthProxyError(
+          "invalid_request",
+          "code_challenge is required for Client ID Metadata Document clients"
+        );
+      }
+      if (params.code_challenge_method !== "S256") {
+        throw new OAuthProxyError(
+          "invalid_request",
+          "code_challenge_method must be S256 for Client ID Metadata Document clients"
+        );
+      }
+    }
     const transaction = await this.createTransaction(params);
     if (this.config.consentRequired && !transaction.consentGiven) {
       return this.consentManager.createConsentResponse(
@@ -1275,7 +1473,7 @@ var OAuthProxy = (_class4 = class {
         "Only authorization_code grant type is supported"
       );
     }
-    const registeredClient = await this.stateStore.getRegisteredClientByClientId(request.client_id);
+    const registeredClient = await this.resolveClient(request.client_id);
     if (!registeredClient) {
       throw new OAuthProxyError("invalid_client", "Unknown client_id");
     }
@@ -1297,6 +1495,12 @@ var OAuthProxy = (_class4 = class {
     if (clientCode.clientId !== request.client_id) {
       throw new OAuthProxyError("invalid_client", "Client ID mismatch");
     }
+    if (registeredClient.source === "cimd" && !clientCode.codeChallenge) {
+      throw new OAuthProxyError(
+        "invalid_grant",
+        "PKCE is required for Client ID Metadata Document clients"
+      );
+    }
     if (clientCode.codeChallenge) {
       if (!request.code_verifier) {
         throw new OAuthProxyError(
@@ -1363,6 +1567,7 @@ var OAuthProxy = (_class4 = class {
   getAuthorizationServerMetadata() {
     return {
       authorizationEndpoint: `${this.config.baseUrl}/oauth/authorize`,
+      ...this.config.enableCimd ? { clientIdMetadataDocumentSupported: true } : {},
       codeChallengeMethodsSupported: this.config.allowPlainPkce ? ["S256", "plain"] : ["S256"],
       grantTypesSupported: ["authorization_code", "refresh_token"],
       issuer: this.config.baseUrl,
@@ -1398,7 +1603,7 @@ var OAuthProxy = (_class4 = class {
     if (!transaction) {
       throw new OAuthProxyError("invalid_request", "Invalid or expired state");
     }
-    if (!await this.stateStore.isTransactionCallbackRegistered(transaction)) {
+    if (!await this.isTransactionCallbackRegistered(transaction)) {
       throw new OAuthProxyError(
         "invalid_request",
         "Transaction callback URL is not registered"
@@ -1444,7 +1649,7 @@ var OAuthProxy = (_class4 = class {
     }
     if (action === "deny") {
       await this.stateStore.deleteTransaction(transactionId);
-      if (!await this.stateStore.isTransactionCallbackRegistered(transaction)) {
+      if (!await this.isTransactionCallbackRegistered(transaction)) {
         throw new OAuthProxyError(
           "invalid_request",
           "Transaction callback URL is not registered"
@@ -1641,7 +1846,7 @@ var OAuthProxy = (_class4 = class {
         const error = await tokenResponse.json();
         errorCode = error.error || "server_error";
         errorDescription = error.error_description;
-      } catch (e3) {
+      } catch (e7) {
         errorDescription = `Upstream returned HTTP ${tokenResponse.status} ${tokenResponse.statusText}`;
       }
       throw new OAuthProxyError(errorCode, errorDescription);
@@ -1805,7 +2010,7 @@ var OAuthProxy = (_class4 = class {
         const error = await tokenResponse.json();
         errorCode = error.error || "invalid_grant";
         errorDescription = error.error_description;
-      } catch (e4) {
+      } catch (e8) {
         errorDescription = `Upstream returned HTTP ${tokenResponse.status} ${tokenResponse.statusText}`;
       }
       throw new OAuthProxyError(errorCode, errorDescription);
@@ -2030,6 +2235,21 @@ var OAuthProxy = (_class4 = class {
     }
     return response;
   }
+  /**
+   * Defence in depth for the callback and consent-denial redirects: the
+   * transaction's stored callback URL must still be registered for its client.
+   *
+   * Resolution goes through {@link resolveClient}, so a CIMD registration whose
+   * cached copy lapsed mid-flow is re-fetched rather than mistaken for one that
+   * was revoked.
+   */
+  async isTransactionCallbackRegistered(transaction) {
+    const registeredClient = await this.resolveClient(
+      transaction.clientId,
+      transaction.clientCallbackUrl
+    );
+    return _nullishCoalesce(_optionalChain([registeredClient, 'optionalAccess', _17 => _17.redirectUris, 'access', _18 => _18.includes, 'call', _19 => _19(transaction.clientCallbackUrl)]), () => ( false));
+  }
   /**
    * Match URI against pattern (supports wildcards)
    */
@@ -2140,7 +2360,7 @@ var OAuthProxy = (_class4 = class {
         const error = await tokenResponse.json();
         errorCode = error.error || "invalid_grant";
         errorDescription = error.error_description || "Upstream refresh failed";
-      } catch (e5) {
+      } catch (e9) {
         errorDescription = `Upstream returned HTTP ${tokenResponse.status} ${tokenResponse.statusText}`;
       }
       throw new OAuthProxyError(errorCode, errorDescription);
@@ -2157,6 +2377,32 @@ var OAuthProxy = (_class4 = class {
       tokenType: tokens.token_type || "Bearer"
     };
   }
+  /**
+   * Resolve the client behind a `client_id`: a stored registration if there is
+   * one, otherwise — when CIMD is enabled — the client's metadata document.
+   *
+   * A resolved CIMD client is cached like a DCR registration but carries the
+   * `expiresAt` the resolver stamped on it, so the store drops it once it
+   * lapses and the next call re-fetches the document. Every lookup goes
+   * through here, so a lapse always means "re-resolve", never "unknown
+   * client" mid-flow.
+   */
+  async resolveClient(clientId, requestedRedirectUri) {
+    const registeredClient = await this.stateStore.getRegisteredClientByClientId(clientId);
+    if (registeredClient || !this.config.enableCimd) {
+      return registeredClient;
+    }
+    const resolved = await resolveCimdClient(
+      clientId,
+      requestedRedirectUri,
+      (uri) => this.validateRedirectUri(uri)
+    );
+    if (resolved) {
+      this.stateStore.cacheRegisteredClient(resolved);
+      await this.stateStore.saveRegisteredClient(resolved);
+    }
+    return resolved;
+  }
   /**
    * Put a claimed refresh-token mapping back after a rotation failed, keeping
    * whatever lifetime it had left.
@@ -2225,7 +2471,7 @@ var OAuthProxy = (_class4 = class {
     let parsed;
     try {
       parsed = new URL(uri);
-    } catch (e6) {
+    } catch (e10) {
       return false;
     }
     if (parsed.username !== "" || parsed.password !== "") {
@@ -2290,7 +2536,7 @@ var AuthProvider = class {
     if (!request) {
       return void 0;
     }
-    const authHeader = _optionalChain([request, 'access', _17 => _17.headers, 'optionalAccess', _18 => _18.authorization]);
+    const authHeader = _optionalChain([request, 'access', _20 => _20.headers, 'optionalAccess', _21 => _21.authorization]);
     if (!authHeader || !authHeader.startsWith("Bearer ")) {
       return void 0;
     }
@@ -2526,7 +2772,7 @@ var DiskStore = (_class5 = class {
           console.warn(`Failed to read/parse file ${file}, deleting:`, error);
           try {
             await _promises.rm.call(void 0, _path.join.call(void 0, this.directory, file));
-          } catch (e7) {
+          } catch (e11) {
           }
         }
       }
@@ -2606,7 +2852,7 @@ var DiskStore = (_class5 = class {
       await this.ensureDirectory();
       const files = await _promises.readdir.call(void 0, this.directory);
       return files.filter((f) => f.endsWith(this.fileExtension)).length;
-    } catch (e8) {
+    } catch (e12) {
       return 0;
     }
   }
@@ -2830,4 +3076,4 @@ Original error: ${error.message}`
 
 
 exports.getAuthSession = getAuthSession; exports.requireAll = requireAll; exports.requireAny = requireAny; exports.requireAuth = requireAuth; exports.requireRole = requireRole; exports.requireScopes = requireScopes; exports.DEFAULT_ACCESS_TOKEN_TTL = DEFAULT_ACCESS_TOKEN_TTL; exports.DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH = DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH; exports.DEFAULT_REFRESH_TOKEN_TTL = DEFAULT_REFRESH_TOKEN_TTL; exports.DEFAULT_AUTHORIZATION_CODE_TTL = DEFAULT_AUTHORIZATION_CODE_TTL; exports.DEFAULT_TRANSACTION_TTL = DEFAULT_TRANSACTION_TTL; exports.ConsentManager = ConsentManager; exports.JWTIssuer = JWTIssuer; exports.PKCEUtils = PKCEUtils; exports.EncryptedTokenStorage = EncryptedTokenStorage; exports.MemoryTokenStorage = MemoryTokenStorage; exports.OAuthProxy = OAuthProxy; exports.OAuthProxyError = OAuthProxyError; exports.AuthProvider = AuthProvider; exports.AzureProvider = AzureProvider; exports.GitHubProvider = GitHubProvider; exports.GoogleProvider = GoogleProvider; exports.OAuthProvider = OAuthProvider; exports.DiskStore = DiskStore; exports.JWKSVerifier = JWKSVerifier;
-//# sourceMappingURL=chunk-YZWUEW3A.cjs.map
+//# sourceMappingURL=chunk-E3HXGE2O.cjs.map