fastmcp 4.23.8 → 4.23.9

package/dist/FastMCP.cjs

@@ -11,7 +11,7 @@
 
 
 
-var _chunkXEP3OP7Qcjs = require('./chunk-XEP3OP7Q.cjs');
+var _chunkPV5VLW7Rcjs = require('./chunk-PV5VLW7R.cjs');
 
 
 
@@ -24,8 +24,8 @@ var _chunkXEP3OP7Qcjs = require('./chunk-XEP3OP7Q.cjs');
 
 
 
-var _chunkAJRXMUZRcjs = require('./chunk-AJRXMUZR.cjs');
-require('./chunk-T2F3RYH2.cjs');
+var _chunk4OWHPJELcjs = require('./chunk-4OWHPJEL.cjs');
+require('./chunk-6TDYSPLC.cjs');
 
 
 
@@ -50,5 +50,5 @@ require('./chunk-T2F3RYH2.cjs');
 
 
 
-exports.AuthProvider = _chunkAJRXMUZRcjs.AuthProvider; exports.AzureProvider = _chunkAJRXMUZRcjs.AzureProvider; exports.DiscoveryDocumentCache = _chunkXEP3OP7Qcjs.DiscoveryDocumentCache; exports.FastMCP = _chunkXEP3OP7Qcjs.FastMCP; exports.FastMCPError = _chunkXEP3OP7Qcjs.FastMCPError; exports.FastMCPSession = _chunkXEP3OP7Qcjs.FastMCPSession; exports.GitHubProvider = _chunkAJRXMUZRcjs.GitHubProvider; exports.GoogleProvider = _chunkAJRXMUZRcjs.GoogleProvider; exports.MEDIA_FETCH_TIMEOUT_MS = _chunkXEP3OP7Qcjs.MEDIA_FETCH_TIMEOUT_MS; exports.OAuthProvider = _chunkAJRXMUZRcjs.OAuthProvider; exports.ServerState = _chunkXEP3OP7Qcjs.ServerState; exports.SessionError = _chunkXEP3OP7Qcjs.SessionError; exports.UnexpectedStateError = _chunkXEP3OP7Qcjs.UnexpectedStateError; exports.UserError = _chunkXEP3OP7Qcjs.UserError; exports.audioContent = _chunkXEP3OP7Qcjs.audioContent; exports.getAuthSession = _chunkAJRXMUZRcjs.getAuthSession; exports.imageContent = _chunkXEP3OP7Qcjs.imageContent; exports.jsonSchemaAdapter = _chunkXEP3OP7Qcjs.jsonSchemaAdapter; exports.requireAll = _chunkAJRXMUZRcjs.requireAll; exports.requireAny = _chunkAJRXMUZRcjs.requireAny; exports.requireAuth = _chunkAJRXMUZRcjs.requireAuth; exports.requireRole = _chunkAJRXMUZRcjs.requireRole; exports.requireScopes = _chunkAJRXMUZRcjs.requireScopes;
+exports.AuthProvider = _chunk4OWHPJELcjs.AuthProvider; exports.AzureProvider = _chunk4OWHPJELcjs.AzureProvider; exports.DiscoveryDocumentCache = _chunkPV5VLW7Rcjs.DiscoveryDocumentCache; exports.FastMCP = _chunkPV5VLW7Rcjs.FastMCP; exports.FastMCPError = _chunkPV5VLW7Rcjs.FastMCPError; exports.FastMCPSession = _chunkPV5VLW7Rcjs.FastMCPSession; exports.GitHubProvider = _chunk4OWHPJELcjs.GitHubProvider; exports.GoogleProvider = _chunk4OWHPJELcjs.GoogleProvider; exports.MEDIA_FETCH_TIMEOUT_MS = _chunkPV5VLW7Rcjs.MEDIA_FETCH_TIMEOUT_MS; exports.OAuthProvider = _chunk4OWHPJELcjs.OAuthProvider; exports.ServerState = _chunkPV5VLW7Rcjs.ServerState; exports.SessionError = _chunkPV5VLW7Rcjs.SessionError; exports.UnexpectedStateError = _chunkPV5VLW7Rcjs.UnexpectedStateError; exports.UserError = _chunkPV5VLW7Rcjs.UserError; exports.audioContent = _chunkPV5VLW7Rcjs.audioContent; exports.getAuthSession = _chunk4OWHPJELcjs.getAuthSession; exports.imageContent = _chunkPV5VLW7Rcjs.imageContent; exports.jsonSchemaAdapter = _chunkPV5VLW7Rcjs.jsonSchemaAdapter; exports.requireAll = _chunk4OWHPJELcjs.requireAll; exports.requireAny = _chunk4OWHPJELcjs.requireAny; exports.requireAuth = _chunk4OWHPJELcjs.requireAuth; exports.requireRole = _chunk4OWHPJELcjs.requireRole; exports.requireScopes = _chunk4OWHPJELcjs.requireScopes;
 //# sourceMappingURL=FastMCP.cjs.map

package/dist/FastMCP.d.cts

@@ -486,7 +486,8 @@ type ServerOptions<T extends FastMCPSessionAuth> = {
     icons?: Icon[];
     instructions?: string;
     /**
-     * Custom logger instance. If not provided, defaults to console.
+     * Custom logger instance. Defaults to console, with stdio session diagnostics
+     * written to stderr.
      * Use this to integrate with your own logging system.
      */
     logger?: Logger;

package/dist/FastMCP.d.ts

@@ -486,7 +486,8 @@ type ServerOptions<T extends FastMCPSessionAuth> = {
     icons?: Icon[];
     instructions?: string;
     /**
-     * Custom logger instance. If not provided, defaults to console.
+     * Custom logger instance. Defaults to console, with stdio session diagnostics
+     * written to stderr.
      * Use this to integrate with your own logging system.
      */
     logger?: Logger;

package/dist/FastMCP.js

@@ -11,7 +11,7 @@ import {
   audioContent,
   imageContent,
   jsonSchemaAdapter
-} from "./chunk-PLUAEIWE.js";
+} from "./chunk-75ZLE5AS.js";
 import {
   AuthProvider,
   AzureProvider,
@@ -24,8 +24,8 @@ import {
   requireAuth,
   requireRole,
   requireScopes
-} from "./chunk-UY253ACS.js";
-import "./chunk-F76U45MT.js";
+} from "./chunk-G44SPVP7.js";
+import "./chunk-OKKFL2M4.js";
 export {
   AuthProvider,
   AzureProvider,

package/dist/auth/index.cjs

@@ -24,7 +24,7 @@
 
 
 
-var _chunkAJRXMUZRcjs = require('../chunk-AJRXMUZR.cjs');
+var _chunk4OWHPJELcjs = require('../chunk-4OWHPJEL.cjs');
 
 
 
@@ -51,5 +51,5 @@ var _chunkAJRXMUZRcjs = require('../chunk-AJRXMUZR.cjs');
 
 
 
-exports.AuthProvider = _chunkAJRXMUZRcjs.AuthProvider; exports.AzureProvider = _chunkAJRXMUZRcjs.AzureProvider; exports.ConsentManager = _chunkAJRXMUZRcjs.ConsentManager; exports.DEFAULT_ACCESS_TOKEN_TTL = _chunkAJRXMUZRcjs.DEFAULT_ACCESS_TOKEN_TTL; exports.DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH = _chunkAJRXMUZRcjs.DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH; exports.DEFAULT_AUTHORIZATION_CODE_TTL = _chunkAJRXMUZRcjs.DEFAULT_AUTHORIZATION_CODE_TTL; exports.DEFAULT_REFRESH_TOKEN_TTL = _chunkAJRXMUZRcjs.DEFAULT_REFRESH_TOKEN_TTL; exports.DEFAULT_TRANSACTION_TTL = _chunkAJRXMUZRcjs.DEFAULT_TRANSACTION_TTL; exports.DiskStore = _chunkAJRXMUZRcjs.DiskStore; exports.EncryptedTokenStorage = _chunkAJRXMUZRcjs.EncryptedTokenStorage; exports.GitHubProvider = _chunkAJRXMUZRcjs.GitHubProvider; exports.GoogleProvider = _chunkAJRXMUZRcjs.GoogleProvider; exports.JWKSVerifier = _chunkAJRXMUZRcjs.JWKSVerifier; exports.JWTIssuer = _chunkAJRXMUZRcjs.JWTIssuer; exports.MemoryTokenStorage = _chunkAJRXMUZRcjs.MemoryTokenStorage; exports.OAuthProvider = _chunkAJRXMUZRcjs.OAuthProvider; exports.OAuthProxy = _chunkAJRXMUZRcjs.OAuthProxy; exports.OAuthProxyError = _chunkAJRXMUZRcjs.OAuthProxyError; exports.PKCEUtils = _chunkAJRXMUZRcjs.PKCEUtils; exports.getAuthSession = _chunkAJRXMUZRcjs.getAuthSession; exports.requireAll = _chunkAJRXMUZRcjs.requireAll; exports.requireAny = _chunkAJRXMUZRcjs.requireAny; exports.requireAuth = _chunkAJRXMUZRcjs.requireAuth; exports.requireRole = _chunkAJRXMUZRcjs.requireRole; exports.requireScopes = _chunkAJRXMUZRcjs.requireScopes;
+exports.AuthProvider = _chunk4OWHPJELcjs.AuthProvider; exports.AzureProvider = _chunk4OWHPJELcjs.AzureProvider; exports.ConsentManager = _chunk4OWHPJELcjs.ConsentManager; exports.DEFAULT_ACCESS_TOKEN_TTL = _chunk4OWHPJELcjs.DEFAULT_ACCESS_TOKEN_TTL; exports.DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH = _chunk4OWHPJELcjs.DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH; exports.DEFAULT_AUTHORIZATION_CODE_TTL = _chunk4OWHPJELcjs.DEFAULT_AUTHORIZATION_CODE_TTL; exports.DEFAULT_REFRESH_TOKEN_TTL = _chunk4OWHPJELcjs.DEFAULT_REFRESH_TOKEN_TTL; exports.DEFAULT_TRANSACTION_TTL = _chunk4OWHPJELcjs.DEFAULT_TRANSACTION_TTL; exports.DiskStore = _chunk4OWHPJELcjs.DiskStore; exports.EncryptedTokenStorage = _chunk4OWHPJELcjs.EncryptedTokenStorage; exports.GitHubProvider = _chunk4OWHPJELcjs.GitHubProvider; exports.GoogleProvider = _chunk4OWHPJELcjs.GoogleProvider; exports.JWKSVerifier = _chunk4OWHPJELcjs.JWKSVerifier; exports.JWTIssuer = _chunk4OWHPJELcjs.JWTIssuer; exports.MemoryTokenStorage = _chunk4OWHPJELcjs.MemoryTokenStorage; exports.OAuthProvider = _chunk4OWHPJELcjs.OAuthProvider; exports.OAuthProxy = _chunk4OWHPJELcjs.OAuthProxy; exports.OAuthProxyError = _chunk4OWHPJELcjs.OAuthProxyError; exports.PKCEUtils = _chunk4OWHPJELcjs.PKCEUtils; exports.getAuthSession = _chunk4OWHPJELcjs.getAuthSession; exports.requireAll = _chunk4OWHPJELcjs.requireAll; exports.requireAny = _chunk4OWHPJELcjs.requireAny; exports.requireAuth = _chunk4OWHPJELcjs.requireAuth; exports.requireRole = _chunk4OWHPJELcjs.requireRole; exports.requireScopes = _chunk4OWHPJELcjs.requireScopes;
 //# sourceMappingURL=index.cjs.map

package/dist/auth/index.js

@@ -24,7 +24,7 @@ import {
   requireAuth,
   requireRole,
   requireScopes
-} from "../chunk-UY253ACS.js";
+} from "../chunk-G44SPVP7.js";
 export {
   AuthProvider,
   AzureProvider,

package/dist/{chunk-AJRXMUZR.cjs → chunk-4OWHPJEL.cjs}

@@ -1441,6 +1441,12 @@ var OAuthProxy = (_class4 = class {
         "code_challenge_method required when code_challenge is present"
       );
     }
+    if (params.code_challenge && params.code_challenge_method !== "S256" && params.code_challenge_method !== "plain") {
+      throw new OAuthProxyError(
+        "invalid_request",
+        `code_challenge_method '${params.code_challenge_method}' is not supported; use S256`
+      );
+    }
     if (params.code_challenge_method === "plain" && !this.config.allowPlainPkce) {
       throw new OAuthProxyError(
         "invalid_request",
@@ -2615,9 +2621,10 @@ var AuthProvider = class {
    * Override in subclasses to add provider-specific session data.
    */
   createSession(upstreamTokens) {
+    const issuedAt = new Date(upstreamTokens.issuedAt).getTime() || Date.now();
     return {
       accessToken: upstreamTokens.accessToken,
-      expiresAt: upstreamTokens.expiresIn ? Math.floor(Date.now() / 1e3) + upstreamTokens.expiresIn : void 0,
+      expiresAt: upstreamTokens.expiresIn ? Math.floor(issuedAt / 1e3) + upstreamTokens.expiresIn : void 0,
       idToken: upstreamTokens.idToken,
       refreshToken: upstreamTokens.refreshToken,
       scopes: upstreamTokens.scope
@@ -3146,4 +3153,4 @@ Original error: ${error.message}`
 
 
 exports.cancelResponseBody = cancelResponseBody; exports.getAuthSession = getAuthSession; exports.requireAll = requireAll; exports.requireAny = requireAny; exports.requireAuth = requireAuth; exports.requireRole = requireRole; exports.requireScopes = requireScopes; exports.DEFAULT_ACCESS_TOKEN_TTL = DEFAULT_ACCESS_TOKEN_TTL; exports.DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH = DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH; exports.DEFAULT_REFRESH_TOKEN_TTL = DEFAULT_REFRESH_TOKEN_TTL; exports.DEFAULT_AUTHORIZATION_CODE_TTL = DEFAULT_AUTHORIZATION_CODE_TTL; exports.DEFAULT_TRANSACTION_TTL = DEFAULT_TRANSACTION_TTL; exports.ConsentManager = ConsentManager; exports.JWTIssuer = JWTIssuer; exports.PKCEUtils = PKCEUtils; exports.EncryptedTokenStorage = EncryptedTokenStorage; exports.MemoryTokenStorage = MemoryTokenStorage; exports.OAuthProxy = OAuthProxy; exports.OAuthProxyError = OAuthProxyError; exports.AuthProvider = AuthProvider; exports.AzureProvider = AzureProvider; exports.GitHubProvider = GitHubProvider; exports.GoogleProvider = GoogleProvider; exports.OAuthProvider = OAuthProvider; exports.DiskStore = DiskStore; exports.JWKSVerifier = JWKSVerifier;
-//# sourceMappingURL=chunk-AJRXMUZR.cjs.map
+//# sourceMappingURL=chunk-4OWHPJEL.cjs.map