fastmcp 4.19.0 → 4.20.0

package/dist/{chunk-E3HXGE2O.cjs → chunk-YO76IUZ6.cjs}

@@ -285,6 +285,17 @@ var DEFAULT_AUTHORIZATION_CODE_TTL = 300;
 var DEFAULT_TRANSACTION_TTL = 600;
 var DEFAULT_UPSTREAM_REQUEST_TIMEOUT_MS = 1e4;
 
+// src/cancelResponseBody.ts
+var cancelResponseBody = async (response) => {
+  if (!response.body) {
+    return;
+  }
+  try {
+    await response.body.cancel();
+  } catch (e) {
+  }
+};
+
 // src/auth/utils/cimd.ts
 var CIMD_FETCH_TIMEOUT_MS = 5e3;
 var CIMD_CLIENT_TTL_MS = 15 * 60 * 1e3;
@@ -293,7 +304,7 @@ async function resolveCimdClient(clientId, requestedRedirectUri, validateRedirec
   let url;
   try {
     url = new URL(clientId);
-  } catch (e) {
+  } catch (e2) {
     return null;
   }
   if (url.protocol !== "https:" || url.search) {
@@ -308,10 +319,11 @@ async function resolveCimdClient(clientId, requestedRedirectUri, validateRedirec
       redirect: "error",
       signal: AbortSignal.timeout(CIMD_FETCH_TIMEOUT_MS)
     });
-  } catch (e2) {
+  } catch (e3) {
     return null;
   }
   if (!response.ok) {
+    await cancelResponseBody(response);
     return null;
   }
   const text = await readBoundedText(response);
@@ -321,7 +333,7 @@ async function resolveCimdClient(clientId, requestedRedirectUri, validateRedirec
   let parsed;
   try {
     parsed = JSON.parse(text);
-  } catch (e3) {
+  } catch (e4) {
     return null;
   }
   if (typeof parsed !== "object" || parsed === null) {
@@ -425,6 +437,7 @@ function optionalString(value) {
 async function readBoundedText(response) {
   const contentLength = response.headers.get("content-length");
   if (contentLength && Number(contentLength) > CIMD_MAX_RESPONSE_BYTES) {
+    await cancelResponseBody(response);
     return null;
   }
   const reader = _optionalChain([response, 'access', _ => _.body, 'optionalAccess', _2 => _2.getReader, 'call', _3 => _3()]);
@@ -446,7 +459,7 @@ async function readBoundedText(response) {
       }
       chunks.push(value);
     }
-  } catch (e4) {
+  } catch (e5) {
     return null;
   }
   return Buffer.concat(chunks).toString("utf-8");
@@ -589,7 +602,7 @@ var ClaimsExtractor = (_class = class {
         const stringified = JSON.stringify(value);
         const maxSize = _nullishCoalesce(this.config.maxClaimValueSize, () => ( 2e3));
         return stringified.length <= maxSize;
-      } catch (e5) {
+      } catch (e6) {
         return false;
       }
     }
@@ -870,7 +883,7 @@ var ConsentManager = class {
         return null;
       }
       return data;
-    } catch (e6) {
+    } catch (e7) {
       return null;
     }
   }
@@ -1846,7 +1859,7 @@ var OAuthProxy = (_class4 = class {
         const error = await tokenResponse.json();
         errorCode = error.error || "server_error";
         errorDescription = error.error_description;
-      } catch (e7) {
+      } catch (e8) {
         errorDescription = `Upstream returned HTTP ${tokenResponse.status} ${tokenResponse.statusText}`;
       }
       throw new OAuthProxyError(errorCode, errorDescription);
@@ -2010,7 +2023,7 @@ var OAuthProxy = (_class4 = class {
         const error = await tokenResponse.json();
         errorCode = error.error || "invalid_grant";
         errorDescription = error.error_description;
-      } catch (e8) {
+      } catch (e9) {
         errorDescription = `Upstream returned HTTP ${tokenResponse.status} ${tokenResponse.statusText}`;
       }
       throw new OAuthProxyError(errorCode, errorDescription);
@@ -2360,7 +2373,7 @@ var OAuthProxy = (_class4 = class {
         const error = await tokenResponse.json();
         errorCode = error.error || "invalid_grant";
         errorDescription = error.error_description || "Upstream refresh failed";
-      } catch (e9) {
+      } catch (e10) {
         errorDescription = `Upstream returned HTTP ${tokenResponse.status} ${tokenResponse.statusText}`;
       }
       throw new OAuthProxyError(errorCode, errorDescription);
@@ -2471,7 +2484,7 @@ var OAuthProxy = (_class4 = class {
     let parsed;
     try {
       parsed = new URL(uri);
-    } catch (e10) {
+    } catch (e11) {
       return false;
     }
     if (parsed.username !== "" || parsed.password !== "") {
@@ -2772,7 +2785,7 @@ var DiskStore = (_class5 = class {
           console.warn(`Failed to read/parse file ${file}, deleting:`, error);
           try {
             await _promises.rm.call(void 0, _path.join.call(void 0, this.directory, file));
-          } catch (e11) {
+          } catch (e12) {
           }
         }
       }
@@ -2852,7 +2865,7 @@ var DiskStore = (_class5 = class {
       await this.ensureDirectory();
       const files = await _promises.readdir.call(void 0, this.directory);
       return files.filter((f) => f.endsWith(this.fileExtension)).length;
-    } catch (e12) {
+    } catch (e13) {
       return 0;
     }
   }
@@ -3075,5 +3088,6 @@ Original error: ${error.message}`
 
 
 
-exports.getAuthSession = getAuthSession; exports.requireAll = requireAll; exports.requireAny = requireAny; exports.requireAuth = requireAuth; exports.requireRole = requireRole; exports.requireScopes = requireScopes; exports.DEFAULT_ACCESS_TOKEN_TTL = DEFAULT_ACCESS_TOKEN_TTL; exports.DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH = DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH; exports.DEFAULT_REFRESH_TOKEN_TTL = DEFAULT_REFRESH_TOKEN_TTL; exports.DEFAULT_AUTHORIZATION_CODE_TTL = DEFAULT_AUTHORIZATION_CODE_TTL; exports.DEFAULT_TRANSACTION_TTL = DEFAULT_TRANSACTION_TTL; exports.ConsentManager = ConsentManager; exports.JWTIssuer = JWTIssuer; exports.PKCEUtils = PKCEUtils; exports.EncryptedTokenStorage = EncryptedTokenStorage; exports.MemoryTokenStorage = MemoryTokenStorage; exports.OAuthProxy = OAuthProxy; exports.OAuthProxyError = OAuthProxyError; exports.AuthProvider = AuthProvider; exports.AzureProvider = AzureProvider; exports.GitHubProvider = GitHubProvider; exports.GoogleProvider = GoogleProvider; exports.OAuthProvider = OAuthProvider; exports.DiskStore = DiskStore; exports.JWKSVerifier = JWKSVerifier;
-//# sourceMappingURL=chunk-E3HXGE2O.cjs.map
+
+exports.cancelResponseBody = cancelResponseBody; exports.getAuthSession = getAuthSession; exports.requireAll = requireAll; exports.requireAny = requireAny; exports.requireAuth = requireAuth; exports.requireRole = requireRole; exports.requireScopes = requireScopes; exports.DEFAULT_ACCESS_TOKEN_TTL = DEFAULT_ACCESS_TOKEN_TTL; exports.DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH = DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH; exports.DEFAULT_REFRESH_TOKEN_TTL = DEFAULT_REFRESH_TOKEN_TTL; exports.DEFAULT_AUTHORIZATION_CODE_TTL = DEFAULT_AUTHORIZATION_CODE_TTL; exports.DEFAULT_TRANSACTION_TTL = DEFAULT_TRANSACTION_TTL; exports.ConsentManager = ConsentManager; exports.JWTIssuer = JWTIssuer; exports.PKCEUtils = PKCEUtils; exports.EncryptedTokenStorage = EncryptedTokenStorage; exports.MemoryTokenStorage = MemoryTokenStorage; exports.OAuthProxy = OAuthProxy; exports.OAuthProxyError = OAuthProxyError; exports.AuthProvider = AuthProvider; exports.AzureProvider = AzureProvider; exports.GitHubProvider = GitHubProvider; exports.GoogleProvider = GoogleProvider; exports.OAuthProvider = OAuthProvider; exports.DiskStore = DiskStore; exports.JWKSVerifier = JWKSVerifier;
+//# sourceMappingURL=chunk-YO76IUZ6.cjs.map