skybridge 1.3.4 → 1.4.0

package/README.md

@@ -144,6 +144,7 @@ Explore all our example templates in the [Examples](https://docs.skybridge.tech/
 | <img src="docs/images/showcase-workos.png" alt="Auth WorkOS AuthKit" width="160" /> | WorkOS AuthKit | Full OAuth authentication with WorkOS AuthKit and personalized coffee shop search. | [View code](https://github.com/alpic-ai/skybridge/tree/main/examples/auth-workos) |
 | <img src="docs/images/showcase-stytch.png" alt="Auth Stytch" width="160" /> | Stytch | Full OAuth authentication with Stytch and personalized coffee shop search. | [View code](https://github.com/alpic-ai/skybridge/tree/main/examples/auth-stytch) |
 | <img src="docs/images/showcase-auth0.png" alt="Auth Auth0" width="160" /> | Auth0 | Full OAuth authentication with Auth0 and personalized coffee shop search. | [View code](https://github.com/alpic-ai/skybridge/tree/main/examples/auth-auth0) |
+| <img src="docs/images/showcase-authplane.png" alt="Auth Authplane" width="160" /> | Authplane | Full OAuth authentication with Authplane and personalized coffee shop search. | [View code](https://github.com/alpic-ai/skybridge/tree/main/examples/auth-authplane) |
 
 ### UI and component libraries
 

package/dist/context-warnings.d.ts

@@ -0,0 +1,5 @@
+export declare const TOOL_OUTPUT_WARNING_TOKENS = 5000;
+export declare const VIEW_STATE_WARNING_TOKENS = 20000;
+export declare function estimateContextTokens(value: unknown): number;
+export declare function warnOnLargeToolOutput(result: unknown, toolName: string): void;
+export declare function warnOnLargeViewState(value: unknown, source: string): void;

package/dist/context-warnings.js

@@ -0,0 +1,31 @@
+export const TOOL_OUTPUT_WARNING_TOKENS = 5_000;
+export const VIEW_STATE_WARNING_TOKENS = 20_000;
+export function estimateContextTokens(value) {
+    try {
+        const serialized = JSON.stringify(value);
+        if (!serialized) {
+            return 0;
+        }
+        return Math.ceil(new TextEncoder().encode(serialized).length / 4);
+    }
+    catch {
+        return 0;
+    }
+}
+export function warnOnLargeToolOutput(result, toolName) {
+    if (!result || typeof result !== "object" || Array.isArray(result)) {
+        return;
+    }
+    const { _meta, ...modelVisibleResult } = result;
+    const tokenCount = estimateContextTokens(modelVisibleResult);
+    if (tokenCount >= TOOL_OUTPUT_WARNING_TOKENS) {
+        console.warn(`[skybridge] Tool "${toolName}" returned ${tokenCount} estimated model-visible tokens; this reaches the ${TOOL_OUTPUT_WARNING_TOKENS}-token warning threshold and may overload model context. Content and structured content are included in this estimate.`);
+    }
+}
+export function warnOnLargeViewState(value, source) {
+    const tokenCount = estimateContextTokens(value);
+    if (tokenCount >= VIEW_STATE_WARNING_TOKENS) {
+        console.warn(`[skybridge] ${source} is persisting ${tokenCount} estimated tokens in model-visible view state; this reaches the ${VIEW_STATE_WARNING_TOKENS}-token warning threshold and may overload model context. Persisted view state and data-llm context are included in this estimate.`);
+    }
+}
+//# sourceMappingURL=context-warnings.js.map

package/dist/context-warnings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-warnings.js","sourceRoot":"","sources":["../src/context-warnings.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC;AAChD,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEhD,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAe,EAAE,QAAgB;IACrE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO;IACT,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,EAAE,GAAG,MAAiC,CAAC;IAC3E,MAAM,UAAU,GAAG,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;IAC7D,IAAI,UAAU,IAAI,0BAA0B,EAAE,CAAC;QAC7C,OAAO,CAAC,IAAI,CACV,qBAAqB,QAAQ,cAAc,UAAU,qDAAqD,0BAA0B,wHAAwH,CAC7P,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,MAAc;IACjE,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,UAAU,IAAI,yBAAyB,EAAE,CAAC;QAC5C,OAAO,CAAC,IAAI,CACV,eAAe,MAAM,kBAAkB,UAAU,mEAAmE,yBAAyB,mIAAmI,CACjR,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["export const TOOL_OUTPUT_WARNING_TOKENS = 5_000;\nexport const VIEW_STATE_WARNING_TOKENS = 20_000;\n\nexport function estimateContextTokens(value: unknown): number {\n  try {\n    const serialized = JSON.stringify(value);\n    if (!serialized) {\n      return 0;\n    }\n    return Math.ceil(new TextEncoder().encode(serialized).length / 4);\n  } catch {\n    return 0;\n  }\n}\n\nexport function warnOnLargeToolOutput(result: unknown, toolName: string): void {\n  if (!result || typeof result !== \"object\" || Array.isArray(result)) {\n    return;\n  }\n  const { _meta, ...modelVisibleResult } = result as Record<string, unknown>;\n  const tokenCount = estimateContextTokens(modelVisibleResult);\n  if (tokenCount >= TOOL_OUTPUT_WARNING_TOKENS) {\n    console.warn(\n      `[skybridge] Tool \"${toolName}\" returned ${tokenCount} estimated model-visible tokens; this reaches the ${TOOL_OUTPUT_WARNING_TOKENS}-token warning threshold and may overload model context. Content and structured content are included in this estimate.`,\n    );\n  }\n}\n\nexport function warnOnLargeViewState(value: unknown, source: string): void {\n  const tokenCount = estimateContextTokens(value);\n  if (tokenCount >= VIEW_STATE_WARNING_TOKENS) {\n    console.warn(\n      `[skybridge] ${source} is persisting ${tokenCount} estimated tokens in model-visible view state; this reaches the ${VIEW_STATE_WARNING_TOKENS}-token warning threshold and may overload model context. Persisted view state and data-llm context are included in this estimate.`,\n    );\n  }\n}\n"]}

package/dist/context-warnings.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/context-warnings.test.js

@@ -0,0 +1,28 @@
+import { describe, expect, it, vi } from "vitest";
+import { estimateContextTokens, TOOL_OUTPUT_WARNING_TOKENS, warnOnLargeToolOutput, } from "./context-warnings.js";
+describe("context warnings", () => {
+    it("estimates UTF-8 bytes and returns zero for no content", () => {
+        expect(estimateContextTokens("é")).toBe(1);
+        expect(estimateContextTokens(undefined)).toBe(0);
+    });
+    it("warns when model-visible tool output reaches the threshold", () => {
+        const warnSpy = vi.spyOn(console, "warn").mockImplementation(() => { });
+        warnOnLargeToolOutput({
+            content: [
+                {
+                    type: "text",
+                    text: "x".repeat(TOOL_OUTPUT_WARNING_TOKENS * 4),
+                },
+            ],
+        }, "large-output");
+        expect(warnSpy).toHaveBeenCalledWith(expect.stringContaining('Tool "large-output" returned'));
+        warnSpy.mockRestore();
+    });
+    it("does not warn for large metadata", () => {
+        const warnSpy = vi.spyOn(console, "warn").mockImplementation(() => { });
+        warnOnLargeToolOutput({ content: [], _meta: { private: "x".repeat(100_000) } }, "large-meta");
+        expect(warnSpy).not.toHaveBeenCalled();
+        warnSpy.mockRestore();
+    });
+});
+//# sourceMappingURL=context-warnings.test.js.map

package/dist/context-warnings.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-warnings.test.js","sourceRoot":"","sources":["../src/context-warnings.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAE/B,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEvE,qBAAqB,CACnB;YACE,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,0BAA0B,GAAG,CAAC,CAAC;iBACjD;aACF;SACF,EACD,cAAc,CACf,CAAC;QAEF,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAClC,MAAM,CAAC,gBAAgB,CAAC,8BAA8B,CAAC,CACxD,CAAC;QACF,OAAO,CAAC,WAAW,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEvE,qBAAqB,CACnB,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,EACxD,YAAY,CACb,CAAC;QAEF,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACvC,OAAO,CAAC,WAAW,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { describe, expect, it, vi } from \"vitest\";\nimport {\n  estimateContextTokens,\n  TOOL_OUTPUT_WARNING_TOKENS,\n  warnOnLargeToolOutput,\n} from \"./context-warnings.js\";\n\ndescribe(\"context warnings\", () => {\n  it(\"estimates UTF-8 bytes and returns zero for no content\", () => {\n    expect(estimateContextTokens(\"é\")).toBe(1);\n    expect(estimateContextTokens(undefined)).toBe(0);\n  });\n\n  it(\"warns when model-visible tool output reaches the threshold\", () => {\n    const warnSpy = vi.spyOn(console, \"warn\").mockImplementation(() => {});\n\n    warnOnLargeToolOutput(\n      {\n        content: [\n          {\n            type: \"text\",\n            text: \"x\".repeat(TOOL_OUTPUT_WARNING_TOKENS * 4),\n          },\n        ],\n      },\n      \"large-output\",\n    );\n\n    expect(warnSpy).toHaveBeenCalledWith(\n      expect.stringContaining('Tool \"large-output\" returned'),\n    );\n    warnSpy.mockRestore();\n  });\n\n  it(\"does not warn for large metadata\", () => {\n    const warnSpy = vi.spyOn(console, \"warn\").mockImplementation(() => {});\n\n    warnOnLargeToolOutput(\n      { content: [], _meta: { private: \"x\".repeat(100_000) } },\n      \"large-meta\",\n    );\n\n    expect(warnSpy).not.toHaveBeenCalled();\n    warnSpy.mockRestore();\n  });\n});\n"]}

package/dist/server/auth/index.d.ts

@@ -1,7 +1,17 @@
 import type { OAuthMetadata } from "@modelcontextprotocol/sdk/shared/auth.js";
+import type { ExtraClaims, TokenVerifier } from "../auth.js";
 import type { JwksVerifyConfig } from "./verify.js";
-/** Resource-server OAuth config for `SkybridgeServerOptions.oauth`. */
-export type OAuthConfig = {
+/**
+ * Resource-server OAuth config for `SkybridgeServerOptions.oauth`.
+ *
+ * Supply either a `verifier` or the legacy `verify` parameters, never both.
+ * `TExtra` comes from the `verifier` and flows on to tool handlers and
+ * `mcpMiddleware`, so the claim shape is declared once by whoever checks the
+ * token. The branded providers set it from the claims their IdP documents.
+ *
+ * @typeParam TExtra - Claims the verifier populates in `AuthInfo["extra"]`.
+ */
+export type OAuthConfig<TExtra extends ExtraClaims = ExtraClaims> = {
     /**
      * Public URL of this server; sets `resourceServerUrl` and the
      * `resource_metadata` URL. When omitted, it is inferred per request from
@@ -10,9 +20,25 @@ export type OAuthConfig = {
     baseUrl?: string;
     /** AS metadata served at `/.well-known/oauth-authorization-server`. */
     oauthMetadata: OAuthMetadata;
-    verify: JwksVerifyConfig;
     /** Scopes advertised in protected-resource metadata. */
     scopesSupported?: string[];
     /** Server-wide required-scope floor. */
     requiredScopes?: string[];
-};
+} & ({
+    /**
+     * Checks each bearer token. Build one with `createJwksVerifier` for a
+     * JWT-issuing IdP, or supply your own for opaque tokens.
+     */
+    verifier: TokenVerifier<TExtra>;
+    verify?: never;
+} | {
+    /**
+     * JWKS verification parameters, used to build the verifier.
+     *
+     * @deprecated Pass `verifier: createJwksVerifier({ … })` instead, which
+     * also types the claims handlers receive. Claims stay
+     * `Record<string, unknown>` on this path.
+     */
+    verify: JwksVerifyConfig;
+    verifier?: never;
+});

package/dist/server/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/auth/index.ts"],"names":[],"mappings":"","sourcesContent":["import type { OAuthMetadata } from \"@modelcontextprotocol/sdk/shared/auth.js\";\nimport type { JwksVerifyConfig } from \"./verify.js\";\n\n/** Resource-server OAuth config for `SkybridgeServerOptions.oauth`. */\nexport type OAuthConfig = {\n  /**\n   * Public URL of this server; sets `resourceServerUrl` and the\n   * `resource_metadata` URL. When omitted, it is inferred per request from\n   * `x-forwarded-host`/`origin`/`host` headers.\n   */\n  baseUrl?: string;\n  /** AS metadata served at `/.well-known/oauth-authorization-server`. */\n  oauthMetadata: OAuthMetadata;\n  verify: JwksVerifyConfig;\n  /** Scopes advertised in protected-resource metadata. */\n  scopesSupported?: string[];\n  /** Server-wide required-scope floor. */\n  requiredScopes?: string[];\n};\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/auth/index.ts"],"names":[],"mappings":"","sourcesContent":["import type { OAuthMetadata } from \"@modelcontextprotocol/sdk/shared/auth.js\";\nimport type { ExtraClaims, TokenVerifier } from \"../auth.js\";\nimport type { JwksVerifyConfig } from \"./verify.js\";\n\n/**\n * Resource-server OAuth config for `SkybridgeServerOptions.oauth`.\n *\n * Supply either a `verifier` or the legacy `verify` parameters, never both.\n * `TExtra` comes from the `verifier` and flows on to tool handlers and\n * `mcpMiddleware`, so the claim shape is declared once by whoever checks the\n * token. The branded providers set it from the claims their IdP documents.\n *\n * @typeParam TExtra - Claims the verifier populates in `AuthInfo[\"extra\"]`.\n */\nexport type OAuthConfig<TExtra extends ExtraClaims = ExtraClaims> = {\n  /**\n   * Public URL of this server; sets `resourceServerUrl` and the\n   * `resource_metadata` URL. When omitted, it is inferred per request from\n   * `x-forwarded-host`/`origin`/`host` headers.\n   */\n  baseUrl?: string;\n  /** AS metadata served at `/.well-known/oauth-authorization-server`. */\n  oauthMetadata: OAuthMetadata;\n  /** Scopes advertised in protected-resource metadata. */\n  scopesSupported?: string[];\n  /** Server-wide required-scope floor. */\n  requiredScopes?: string[];\n} & (\n  | {\n      /**\n       * Checks each bearer token. Build one with `createJwksVerifier` for a\n       * JWT-issuing IdP, or supply your own for opaque tokens.\n       */\n      verifier: TokenVerifier<TExtra>;\n      verify?: never;\n    }\n  | {\n      /**\n       * JWKS verification parameters, used to build the verifier.\n       *\n       * @deprecated Pass `verifier: createJwksVerifier({ … })` instead, which\n       * also types the claims handlers receive. Claims stay\n       * `Record<string, unknown>` on this path.\n       */\n      verify: JwksVerifyConfig;\n      verifier?: never;\n    }\n);\n"]}

package/dist/server/auth/providers/auth0.d.ts

@@ -1,5 +1,27 @@
+import type { ExtraClaims } from "../../auth.js";
 import type { OAuthConfig } from "../index.js";
+import type { RegisteredClaims } from "../verify.js";
 import { type CustomProviderOptions } from "./custom.js";
+/**
+ * Claims an Auth0 access token carries for a custom API audience. Auth0 puts no
+ * user attributes beyond the id in the token, so there is no `email`: call
+ * `/userinfo` for the profile. Custom claims must be namespaced (a bare `email`
+ * key is silently dropped), so add them through the type parameter under their
+ * full URI.
+ *
+ * @see https://auth0.com/docs/secure/tokens/access-tokens
+ * @see https://auth0.com/docs/secure/tokens/json-web-tokens/create-custom-claims
+ */
+export type Auth0Claims = {
+    /** Authorized party: the client id the token was issued to. */
+    azp?: string;
+    /** Only when the API has RBAC and "Add Permissions in the Access Token" on. */
+    permissions?: string[];
+    /** Organization id, when the tenant uses Organizations. */
+    org_id?: string;
+    /** Organization name, when the tenant uses Organizations. */
+    org_name?: string;
+};
 /**
  * OAuth provider for Auth0. `domain` is the tenant domain (e.g.
  * `acme.us.auth0.com`); `audience` is the API Identifier; `serverUrl` is this
@@ -11,8 +33,8 @@ import { type CustomProviderOptions } from "./custom.js";
  * `authorization_endpoint`. The token's `aud` is the API; `verify.issuer` stays
  * Auth0 (the token's real `iss`).
  */
-export declare function auth0Provider(opts: {
+export declare function auth0Provider<TCustom extends ExtraClaims = Record<never, never>>(opts: {
     domain: string;
     audience: string;
     serverUrl: string;
-} & Omit<CustomProviderOptions, "issuer" | "audience" | "baseUrl" | "serverUrl">): Promise<OAuthConfig>;
+} & Omit<CustomProviderOptions, "issuer" | "audience" | "baseUrl" | "serverUrl">): Promise<OAuthConfig<Auth0Claims & TCustom & RegisteredClaims>>;

package/dist/server/auth/providers/auth0.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth0.js","sourceRoot":"","sources":["../../../../src/server/auth/providers/auth0.ts"],"names":[],"mappings":"AACA,OAAO,EAA8B,cAAc,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAGC;IAED,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC;QAC3B,QAAQ;QACR,GAAG,IAAI;KACR,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC;IACrE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC/C,OAAO;QACL,GAAG,MAAM;QACT,aAAa,EAAE;YACb,GAAG,MAAM,CAAC,aAAa;YACvB,sBAAsB,EAAE,OAAO,CAAC,IAAI;SACrC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { OAuthConfig } from \"../index.js\";\nimport { type CustomProviderOptions, customProvider } from \"./custom.js\";\nimport { toIssuerUrl } from \"./shared.js\";\n\n/**\n * OAuth provider for Auth0. `domain` is the tenant domain (e.g.\n * `acme.us.auth0.com`); `audience` is the API Identifier; `serverUrl` is this\n * server's public URL. Requires DCR enabled on the tenant.\n *\n * Auth0 can't use the client's resource indicator — `audience` must be *in* the\n * authorize request. So it runs as skybridge-as-AS (`serverUrl`, see\n * {@link customProvider}) and bakes `?audience=<id>` into the advertised\n * `authorization_endpoint`. The token's `aud` is the API; `verify.issuer` stays\n * Auth0 (the token's real `iss`).\n */\nexport async function auth0Provider(\n  opts: { domain: string; audience: string; serverUrl: string } & Omit<\n    CustomProviderOptions,\n    \"issuer\" | \"audience\" | \"baseUrl\" | \"serverUrl\"\n  >,\n): Promise<OAuthConfig> {\n  const { domain, audience, ...rest } = opts;\n  const config = await customProvider({\n    issuer: toIssuerUrl(domain),\n    audience,\n    ...rest,\n  });\n  const authUrl = new URL(config.oauthMetadata.authorization_endpoint);\n  authUrl.searchParams.set(\"audience\", audience);\n  return {\n    ...config,\n    oauthMetadata: {\n      ...config.oauthMetadata,\n      authorization_endpoint: authUrl.href,\n    },\n  };\n}\n"]}
+{"version":3,"file":"auth0.js","sourceRoot":"","sources":["../../../../src/server/auth/providers/auth0.ts"],"names":[],"mappings":"AAGA,OAAO,EAA8B,cAAc,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAuB1C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAGjC,IAGC;IAED,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAwB;QACzD,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC;QAC3B,QAAQ;QACR,GAAG,IAAI;KACR,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC;IACrE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC/C,OAAO;QACL,GAAG,MAAM;QACT,aAAa,EAAE;YACb,GAAG,MAAM,CAAC,aAAa;YACvB,sBAAsB,EAAE,OAAO,CAAC,IAAI;SACrC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { ExtraClaims } from \"../../auth.js\";\nimport type { OAuthConfig } from \"../index.js\";\nimport type { RegisteredClaims } from \"../verify.js\";\nimport { type CustomProviderOptions, customProvider } from \"./custom.js\";\nimport { toIssuerUrl } from \"./shared.js\";\n\n/**\n * Claims an Auth0 access token carries for a custom API audience. Auth0 puts no\n * user attributes beyond the id in the token, so there is no `email`: call\n * `/userinfo` for the profile. Custom claims must be namespaced (a bare `email`\n * key is silently dropped), so add them through the type parameter under their\n * full URI.\n *\n * @see https://auth0.com/docs/secure/tokens/access-tokens\n * @see https://auth0.com/docs/secure/tokens/json-web-tokens/create-custom-claims\n */\nexport type Auth0Claims = {\n  /** Authorized party: the client id the token was issued to. */\n  azp?: string;\n  /** Only when the API has RBAC and \"Add Permissions in the Access Token\" on. */\n  permissions?: string[];\n  /** Organization id, when the tenant uses Organizations. */\n  org_id?: string;\n  /** Organization name, when the tenant uses Organizations. */\n  org_name?: string;\n};\n\n/**\n * OAuth provider for Auth0. `domain` is the tenant domain (e.g.\n * `acme.us.auth0.com`); `audience` is the API Identifier; `serverUrl` is this\n * server's public URL. Requires DCR enabled on the tenant.\n *\n * Auth0 can't use the client's resource indicator — `audience` must be *in* the\n * authorize request. So it runs as skybridge-as-AS (`serverUrl`, see\n * {@link customProvider}) and bakes `?audience=<id>` into the advertised\n * `authorization_endpoint`. The token's `aud` is the API; `verify.issuer` stays\n * Auth0 (the token's real `iss`).\n */\nexport async function auth0Provider<\n  TCustom extends ExtraClaims = Record<never, never>,\n>(\n  opts: { domain: string; audience: string; serverUrl: string } & Omit<\n    CustomProviderOptions,\n    \"issuer\" | \"audience\" | \"baseUrl\" | \"serverUrl\"\n  >,\n): Promise<OAuthConfig<Auth0Claims & TCustom & RegisteredClaims>> {\n  const { domain, audience, ...rest } = opts;\n  const config = await customProvider<Auth0Claims & TCustom>({\n    issuer: toIssuerUrl(domain),\n    audience,\n    ...rest,\n  });\n  const authUrl = new URL(config.oauthMetadata.authorization_endpoint);\n  authUrl.searchParams.set(\"audience\", audience);\n  return {\n    ...config,\n    oauthMetadata: {\n      ...config.oauthMetadata,\n      authorization_endpoint: authUrl.href,\n    },\n  };\n}\n"]}

package/dist/server/auth/providers/auth0.test.js

@@ -1,6 +1,8 @@
 // @vitest-environment node
 import { afterEach, describe, expect, it, vi } from "vitest";
 import { auth0Provider } from "./auth0.js";
+import { lastJwksConfig as jwks } from "./verify-spy.js";
+vi.mock("../verify.js", () => import("./verify-spy.js"));
 afterEach(() => vi.restoreAllMocks());
 function doc(issuer) {
     return {
@@ -41,8 +43,8 @@ describe("auth0Provider", () => {
         // baseUrl left unset so the PRM resource resolves per request (Alpic-safe).
         expect(config.baseUrl).toBeUndefined();
         // token verification still uses Auth0 as issuer + the API audience.
-        expect(config.verify.issuer).toBe(issuer);
-        expect(config.verify.audience).toBe("https://api.example.com/");
+        expect(jwks().issuer).toBe(issuer);
+        expect(jwks().audience).toBe("https://api.example.com/");
     });
 });
 //# sourceMappingURL=auth0.test.js.map

package/dist/server/auth/providers/auth0.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth0.test.js","sourceRoot":"","sources":["../../../../src/server/auth/providers/auth0.test.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;AAEtC,SAAS,GAAG,CAAC,MAAc;IACzB,OAAO;QACL,MAAM;QACN,sBAAsB,EAAE,GAAG,MAAM,YAAY;QAC7C,cAAc,EAAE,GAAG,MAAM,cAAc;QACvC,qBAAqB,EAAE,GAAG,MAAM,gBAAgB;QAChD,wBAAwB,EAAE,CAAC,MAAM,CAAC;QAClC,gBAAgB,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;QAChD,QAAQ,EAAE,GAAG,MAAM,wBAAwB;KAC5C,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;QACzG,MAAM,MAAM,GAAG,2BAA2B,CAAC;QAC3C,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,iBAAiB,CAC7C,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE;YACxC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;YACjC,MAAM,EAAE,mBAAmB;YAC3B,QAAQ,EAAE,0BAA0B;YACpC,SAAS,EAAE,0BAA0B;YACrC,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;SACvC,CAAC,CAAC;QAEH,uFAAuF;QACvF,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACpE,+EAA+E;QAC/E,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC;YACpD,QAAQ;YACR,SAAS;YACT,OAAO;SACR,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QACvE,mFAAmF;QACnF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,YAAY,CAAC,CAAC;QAC9D,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC1E,4EAA4E;QAC5E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QACvC,oEAAoE;QACpE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["// @vitest-environment node\nimport { afterEach, describe, expect, it, vi } from \"vitest\";\nimport { auth0Provider } from \"./auth0.js\";\n\nafterEach(() => vi.restoreAllMocks());\n\nfunction doc(issuer: string) {\n  return {\n    issuer,\n    authorization_endpoint: `${issuer}/authorize`,\n    token_endpoint: `${issuer}/oauth/token`,\n    registration_endpoint: `${issuer}/oidc/register`,\n    response_types_supported: [\"code\"],\n    scopes_supported: [\"openid\", \"profile\", \"email\"],\n    jwks_uri: `${issuer}/.well-known/jwks.json`,\n  };\n}\n\ndescribe(\"auth0Provider\", () => {\n  it(\"advertises skybridge as the AS (static issuer) and bakes audience; verifies against Auth0\", async () => {\n    const issuer = \"https://acme.us.auth0.com\";\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValue(\n      new Response(JSON.stringify(doc(issuer)), {\n        headers: { \"content-type\": \"application/json\" },\n      }),\n    );\n\n    const config = await auth0Provider({\n      domain: \"acme.us.auth0.com\",\n      audience: \"https://api.example.com/\",\n      serverUrl: \"https://app.example.com/\",\n      scopes: [\"openid\", \"profile\", \"email\"],\n    });\n\n    // skybridge is the advertised AS: static issuer = serverUrl (trailing slash stripped).\n    expect(config.oauthMetadata.issuer).toBe(\"https://app.example.com\");\n    // AS metadata scopes match the advertised set (clients read scopes from here).\n    expect(config.oauthMetadata.scopes_supported).toEqual([\n      \"openid\",\n      \"profile\",\n      \"email\",\n    ]);\n    expect(config.scopesSupported).toEqual([\"openid\", \"profile\", \"email\"]);\n    // audience baked into the advertised authorize endpoint (still pointing at Auth0).\n    const url = new URL(config.oauthMetadata.authorization_endpoint);\n    expect(url.origin + url.pathname).toBe(`${issuer}/authorize`);\n    expect(url.searchParams.get(\"audience\")).toBe(\"https://api.example.com/\");\n    // baseUrl left unset so the PRM resource resolves per request (Alpic-safe).\n    expect(config.baseUrl).toBeUndefined();\n    // token verification still uses Auth0 as issuer + the API audience.\n    expect(config.verify.issuer).toBe(issuer);\n    expect(config.verify.audience).toBe(\"https://api.example.com/\");\n  });\n});\n"]}
+{"version":3,"file":"auth0.test.js","sourceRoot":"","sources":["../../../../src/server/auth/providers/auth0.test.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,cAAc,IAAI,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAEzD,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAEzD,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;AAEtC,SAAS,GAAG,CAAC,MAAc;IACzB,OAAO;QACL,MAAM;QACN,sBAAsB,EAAE,GAAG,MAAM,YAAY;QAC7C,cAAc,EAAE,GAAG,MAAM,cAAc;QACvC,qBAAqB,EAAE,GAAG,MAAM,gBAAgB;QAChD,wBAAwB,EAAE,CAAC,MAAM,CAAC;QAClC,gBAAgB,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;QAChD,QAAQ,EAAE,GAAG,MAAM,wBAAwB;KAC5C,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;QACzG,MAAM,MAAM,GAAG,2BAA2B,CAAC;QAC3C,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,iBAAiB,CAC7C,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE;YACxC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;YACjC,MAAM,EAAE,mBAAmB;YAC3B,QAAQ,EAAE,0BAA0B;YACpC,SAAS,EAAE,0BAA0B;YACrC,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;SACvC,CAAC,CAAC;QAEH,uFAAuF;QACvF,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACpE,+EAA+E;QAC/E,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC;YACpD,QAAQ;YACR,SAAS;YACT,OAAO;SACR,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QACvE,mFAAmF;QACnF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,YAAY,CAAC,CAAC;QAC9D,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC1E,4EAA4E;QAC5E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QACvC,oEAAoE;QACpE,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["// @vitest-environment node\nimport { afterEach, describe, expect, it, vi } from \"vitest\";\nimport { auth0Provider } from \"./auth0.js\";\nimport { lastJwksConfig as jwks } from \"./verify-spy.js\";\n\nvi.mock(\"../verify.js\", () => import(\"./verify-spy.js\"));\n\nafterEach(() => vi.restoreAllMocks());\n\nfunction doc(issuer: string) {\n  return {\n    issuer,\n    authorization_endpoint: `${issuer}/authorize`,\n    token_endpoint: `${issuer}/oauth/token`,\n    registration_endpoint: `${issuer}/oidc/register`,\n    response_types_supported: [\"code\"],\n    scopes_supported: [\"openid\", \"profile\", \"email\"],\n    jwks_uri: `${issuer}/.well-known/jwks.json`,\n  };\n}\n\ndescribe(\"auth0Provider\", () => {\n  it(\"advertises skybridge as the AS (static issuer) and bakes audience; verifies against Auth0\", async () => {\n    const issuer = \"https://acme.us.auth0.com\";\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValue(\n      new Response(JSON.stringify(doc(issuer)), {\n        headers: { \"content-type\": \"application/json\" },\n      }),\n    );\n\n    const config = await auth0Provider({\n      domain: \"acme.us.auth0.com\",\n      audience: \"https://api.example.com/\",\n      serverUrl: \"https://app.example.com/\",\n      scopes: [\"openid\", \"profile\", \"email\"],\n    });\n\n    // skybridge is the advertised AS: static issuer = serverUrl (trailing slash stripped).\n    expect(config.oauthMetadata.issuer).toBe(\"https://app.example.com\");\n    // AS metadata scopes match the advertised set (clients read scopes from here).\n    expect(config.oauthMetadata.scopes_supported).toEqual([\n      \"openid\",\n      \"profile\",\n      \"email\",\n    ]);\n    expect(config.scopesSupported).toEqual([\"openid\", \"profile\", \"email\"]);\n    // audience baked into the advertised authorize endpoint (still pointing at Auth0).\n    const url = new URL(config.oauthMetadata.authorization_endpoint);\n    expect(url.origin + url.pathname).toBe(`${issuer}/authorize`);\n    expect(url.searchParams.get(\"audience\")).toBe(\"https://api.example.com/\");\n    // baseUrl left unset so the PRM resource resolves per request (Alpic-safe).\n    expect(config.baseUrl).toBeUndefined();\n    // token verification still uses Auth0 as issuer + the API audience.\n    expect(jwks().issuer).toBe(issuer);\n    expect(jwks().audience).toBe(\"https://api.example.com/\");\n  });\n});\n"]}

package/dist/server/auth/providers/authplane.d.ts

@@ -0,0 +1,49 @@
+import type { ExtraClaims } from "../../auth.js";
+import type { OAuthConfig } from "../index.js";
+import type { RegisteredClaims } from "../verify.js";
+import { type CustomProviderOptions } from "./custom.js";
+/** Options accepted by {@link authplaneProvider}. */
+export type AuthplaneProviderOptions = {
+    /**
+     * The authorization server's issuer identifier (RFC 8414 §2) — your
+     * Authplane deployment, e.g. `https://auth.acme.com` (or
+     * `http://localhost:9000` in local development).
+     */
+    issuer: string;
+    /**
+     * This server's resource identifier (RFC 9728 §1.2): the public URL clients
+     * reach, advertised as the `resource` field of its protected-resource
+     * metadata. Required, unlike the other providers.
+     *
+     * Authplane binds the access token's `aud` to the RFC 8707 `resource`
+     * parameter the client sends, and the client takes that value from the
+     * advertised metadata. Setting it explicitly gives the deployment one fixed
+     * identifier, which is what the audience is checked against.
+     *
+     * Resource identifiers are compared by exact string match, so give it in the
+     * form it will be advertised and register that same string in Authplane. RFC
+     * 8707 §2 asks for the most specific URI available, e.g.
+     * `https://acme.example.com/mcp`.
+     */
+    resource: string;
+    /**
+     * Expected token `aud`. Defaults to `resource`.
+     *
+     * RFC 8707 §2 lets an authorization server use the resource identifier
+     * verbatim as the audience or map it to another value; set this only for a
+     * resource configured in Authplane with such an override, and pass that
+     * value verbatim.
+     */
+    audience?: string;
+} & Omit<CustomProviderOptions, "issuer" | "audience" | "baseUrl">;
+/**
+ * OAuth provider for Authplane. `issuer` is the authorization server's issuer
+ * identifier and `resource` is this server's resource identifier, which also
+ * supplies the expected token audience.
+ *
+ * Dynamic Client Registration is supported natively, so no registration proxy
+ * is needed: clients register with Authplane directly and this server stays out
+ * of the authorization path. Pass `serverUrl` to advertise this server as the
+ * authorization server instead (see {@link customProvider}).
+ */
+export declare function authplaneProvider<TCustom extends ExtraClaims = Record<never, never>>(opts: AuthplaneProviderOptions): Promise<OAuthConfig<TCustom & RegisteredClaims>>;

package/dist/server/auth/providers/authplane.js

@@ -0,0 +1,57 @@
+import { customProvider } from "./custom.js";
+/**
+ * Rejects anything that cannot serve as an OAuth identifier: RFC 8707 §2
+ * requires an absolute URI and forbids a fragment, and the discovery and
+ * protected-resource metadata URLs are both built from the scheme and host.
+ */
+function parseIdentifier(value, option) {
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        throw new Error(`authplaneProvider: \`${option}\` must be an absolute URL, got ${JSON.stringify(value)}`);
+    }
+    if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+        throw new Error(`authplaneProvider: \`${option}\` must use the http or https scheme, got ${JSON.stringify(value)}`);
+    }
+    if (!parsed.host) {
+        throw new Error(`authplaneProvider: \`${option}\` must include a host, got ${JSON.stringify(value)}`);
+    }
+    if (parsed.hash) {
+        throw new Error(`authplaneProvider: \`${option}\` must not include a fragment, got ${JSON.stringify(value)}`);
+    }
+    return parsed;
+}
+/**
+ * OAuth provider for Authplane. `issuer` is the authorization server's issuer
+ * identifier and `resource` is this server's resource identifier, which also
+ * supplies the expected token audience.
+ *
+ * Dynamic Client Registration is supported natively, so no registration proxy
+ * is needed: clients register with Authplane directly and this server stays out
+ * of the authorization path. Pass `serverUrl` to advertise this server as the
+ * authorization server instead (see {@link customProvider}).
+ */
+export function authplaneProvider(opts) {
+    const { issuer, resource, audience, ...rest } = opts;
+    parseIdentifier(issuer, "issuer");
+    const parsedResource = parseIdentifier(resource, "resource");
+    // The advertised resource is the URL-normalised form of this value. Where
+    // normalisation would change the string — a bare origin gaining a root path,
+    // an uppercase host, an explicit default port — the configured and advertised
+    // identifiers would differ, and the audience check compares them exactly.
+    // Require the advertised form up front so the two always match.
+    if (parsedResource.href !== resource) {
+        throw new Error(`authplaneProvider: \`resource\` must be given in the form it will be advertised. ` +
+            `${JSON.stringify(resource)} is advertised as ${JSON.stringify(parsedResource.href)}. ` +
+            `Use ${JSON.stringify(parsedResource.href)}, or a path-qualified URL such as "https://acme.example.com/mcp", and register the same value in Authplane.`);
+    }
+    return customProvider({
+        issuer,
+        audience: audience ?? resource,
+        baseUrl: resource,
+        ...rest,
+    });
+}
+//# sourceMappingURL=authplane.js.map

package/dist/server/auth/providers/authplane.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authplane.js","sourceRoot":"","sources":["../../../../src/server/auth/providers/authplane.ts"],"names":[],"mappings":"AAGA,OAAO,EAA8B,cAAc,EAAE,MAAM,aAAa,CAAC;AAqCzE;;;;GAIG;AACH,SAAS,eAAe,CAAC,KAAa,EAAE,MAAc;IACpD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,wBAAwB,MAAM,mCAAmC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CACzF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,wBAAwB,MAAM,6CAA6C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CACnG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,wBAAwB,MAAM,+BAA+B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,wBAAwB,MAAM,uCAAuC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAC7F,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAG/B,IAA8B;IAE9B,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAErD,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClC,MAAM,cAAc,GAAG,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAE7D,0EAA0E;IAC1E,6EAA6E;IAC7E,8EAA8E;IAC9E,0EAA0E;IAC1E,gEAAgE;IAChE,IAAI,cAAc,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,mFAAmF;YACjF,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,qBAAqB,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI;YACvF,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,6GAA6G,CAC1J,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAAU;QAC7B,MAAM;QACN,QAAQ,EAAE,QAAQ,IAAI,QAAQ;QAC9B,OAAO,EAAE,QAAQ;QACjB,GAAG,IAAI;KACR,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { ExtraClaims } from \"../../auth.js\";\nimport type { OAuthConfig } from \"../index.js\";\nimport type { RegisteredClaims } from \"../verify.js\";\nimport { type CustomProviderOptions, customProvider } from \"./custom.js\";\n\n/** Options accepted by {@link authplaneProvider}. */\nexport type AuthplaneProviderOptions = {\n  /**\n   * The authorization server's issuer identifier (RFC 8414 §2) — your\n   * Authplane deployment, e.g. `https://auth.acme.com` (or\n   * `http://localhost:9000` in local development).\n   */\n  issuer: string;\n  /**\n   * This server's resource identifier (RFC 9728 §1.2): the public URL clients\n   * reach, advertised as the `resource` field of its protected-resource\n   * metadata. Required, unlike the other providers.\n   *\n   * Authplane binds the access token's `aud` to the RFC 8707 `resource`\n   * parameter the client sends, and the client takes that value from the\n   * advertised metadata. Setting it explicitly gives the deployment one fixed\n   * identifier, which is what the audience is checked against.\n   *\n   * Resource identifiers are compared by exact string match, so give it in the\n   * form it will be advertised and register that same string in Authplane. RFC\n   * 8707 §2 asks for the most specific URI available, e.g.\n   * `https://acme.example.com/mcp`.\n   */\n  resource: string;\n  /**\n   * Expected token `aud`. Defaults to `resource`.\n   *\n   * RFC 8707 §2 lets an authorization server use the resource identifier\n   * verbatim as the audience or map it to another value; set this only for a\n   * resource configured in Authplane with such an override, and pass that\n   * value verbatim.\n   */\n  audience?: string;\n} & Omit<CustomProviderOptions, \"issuer\" | \"audience\" | \"baseUrl\">;\n\n/**\n * Rejects anything that cannot serve as an OAuth identifier: RFC 8707 §2\n * requires an absolute URI and forbids a fragment, and the discovery and\n * protected-resource metadata URLs are both built from the scheme and host.\n */\nfunction parseIdentifier(value: string, option: string): URL {\n  let parsed: URL;\n  try {\n    parsed = new URL(value);\n  } catch {\n    throw new Error(\n      `authplaneProvider: \\`${option}\\` must be an absolute URL, got ${JSON.stringify(value)}`,\n    );\n  }\n  if (parsed.protocol !== \"https:\" && parsed.protocol !== \"http:\") {\n    throw new Error(\n      `authplaneProvider: \\`${option}\\` must use the http or https scheme, got ${JSON.stringify(value)}`,\n    );\n  }\n  if (!parsed.host) {\n    throw new Error(\n      `authplaneProvider: \\`${option}\\` must include a host, got ${JSON.stringify(value)}`,\n    );\n  }\n  if (parsed.hash) {\n    throw new Error(\n      `authplaneProvider: \\`${option}\\` must not include a fragment, got ${JSON.stringify(value)}`,\n    );\n  }\n  return parsed;\n}\n\n/**\n * OAuth provider for Authplane. `issuer` is the authorization server's issuer\n * identifier and `resource` is this server's resource identifier, which also\n * supplies the expected token audience.\n *\n * Dynamic Client Registration is supported natively, so no registration proxy\n * is needed: clients register with Authplane directly and this server stays out\n * of the authorization path. Pass `serverUrl` to advertise this server as the\n * authorization server instead (see {@link customProvider}).\n */\nexport function authplaneProvider<\n  TCustom extends ExtraClaims = Record<never, never>,\n>(\n  opts: AuthplaneProviderOptions,\n): Promise<OAuthConfig<TCustom & RegisteredClaims>> {\n  const { issuer, resource, audience, ...rest } = opts;\n\n  parseIdentifier(issuer, \"issuer\");\n  const parsedResource = parseIdentifier(resource, \"resource\");\n\n  // The advertised resource is the URL-normalised form of this value. Where\n  // normalisation would change the string — a bare origin gaining a root path,\n  // an uppercase host, an explicit default port — the configured and advertised\n  // identifiers would differ, and the audience check compares them exactly.\n  // Require the advertised form up front so the two always match.\n  if (parsedResource.href !== resource) {\n    throw new Error(\n      `authplaneProvider: \\`resource\\` must be given in the form it will be advertised. ` +\n        `${JSON.stringify(resource)} is advertised as ${JSON.stringify(parsedResource.href)}. ` +\n        `Use ${JSON.stringify(parsedResource.href)}, or a path-qualified URL such as \"https://acme.example.com/mcp\", and register the same value in Authplane.`,\n    );\n  }\n\n  return customProvider<TCustom>({\n    issuer,\n    audience: audience ?? resource,\n    baseUrl: resource,\n    ...rest,\n  });\n}\n"]}

package/dist/server/auth/providers/authplane.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/server/auth/providers/authplane.test.js

@@ -0,0 +1,140 @@
+// @vitest-environment node
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { authplaneProvider } from "./authplane.js";
+import { lastJwksConfig as jwks } from "./verify-spy.js";
+vi.mock("../verify.js", () => import("./verify-spy.js"));
+afterEach(() => vi.restoreAllMocks());
+const ISSUER = "https://auth.acme.com";
+function discoveryDoc(issuer, scopes) {
+    return {
+        issuer,
+        authorization_endpoint: `${issuer}/authorize`,
+        token_endpoint: `${issuer}/token`,
+        registration_endpoint: `${issuer}/register`,
+        response_types_supported: ["code"],
+        scopes_supported: scopes,
+        jwks_uri: `${issuer}/.well-known/jwks.json`,
+    };
+}
+function mockDiscovery(docs) {
+    return vi
+        .spyOn(globalThis, "fetch")
+        .mockImplementation(async (input) => {
+        const url = String(input);
+        const entry = Object.entries(docs).find(([issuer]) => url === `${issuer}/.well-known/openid-configuration`);
+        if (entry === undefined) {
+            return new Response(null, { status: 404 });
+        }
+        return new Response(JSON.stringify(discoveryDoc(...entry)), {
+            headers: { "content-type": "application/json" },
+        });
+    });
+}
+describe("authplaneProvider", () => {
+    it("derives the audience from the resource the server advertises", async () => {
+        mockDiscovery({ [ISSUER]: ["checkout"] });
+        const config = await authplaneProvider({
+            issuer: ISSUER,
+            resource: "https://coffee.example.com/mcp",
+        });
+        expect(jwks().audience).toBe("https://coffee.example.com/mcp");
+        expect(jwks().issuer).toBe(ISSUER);
+        expect(jwks().jwksUri).toBe(`${ISSUER}/.well-known/jwks.json`);
+        expect(config.baseUrl).toBe("https://coffee.example.com/mcp");
+    });
+    it.each([
+        "https://coffee.example.com/mcp",
+        "https://coffee.example.com/v2/mcp",
+        "https://coffee.example.com/",
+        "http://localhost:3000/mcp",
+        "https://coffee.example.com:8443/mcp",
+    ])("passes %s through as both resource and audience", async (resource) => {
+        mockDiscovery({ [ISSUER]: ["checkout"] });
+        const config = await authplaneProvider({ issuer: ISSUER, resource });
+        expect(config.baseUrl).toBe(resource);
+        expect(jwks().audience).toBe(resource);
+    });
+    // The metadata router serialises the resource identifier through `URL` before
+    // advertising it. Anything that serialisation would rewrite is refused here,
+    // so the advertised identifier is always the configured one.
+    it.each([
+        // Pathless origin — gains a root path.
+        ["https://coffee.example.com", "https://coffee.example.com/"],
+        ["http://localhost:3000", "http://localhost:3000/"],
+        // Uppercase host — lowercased.
+        ["https://COFFEE.EXAMPLE.COM/mcp", "https://coffee.example.com/mcp"],
+        // Explicit default port — dropped.
+        ["https://coffee.example.com:443/mcp", "https://coffee.example.com/mcp"],
+    ])("rejects %s and names %s instead", async (resource, published) => {
+        const fetchSpy = mockDiscovery({ [ISSUER]: ["checkout"] });
+        expect(() => authplaneProvider({ issuer: ISSUER, resource })).toThrow(`is advertised as ${JSON.stringify(published)}`);
+        expect(fetchSpy).not.toHaveBeenCalled();
+    });
+    it("lets an explicit audience override the default", async () => {
+        mockDiscovery({ [ISSUER]: ["checkout"] });
+        await authplaneProvider({
+            issuer: ISSUER,
+            resource: "https://coffee.example.com/mcp",
+            audience: "urn:acme:coffee",
+        });
+        expect(jwks().audience).toBe("urn:acme:coffee");
+    });
+    it.each([
+        ["coffee.example.com/mcp", /must be an absolute URL/],
+        ["ftp://coffee.example.com/mcp", /must use the http or https scheme/],
+        ["https://coffee.example.com/mcp#frag", /must not include a fragment/],
+    ])("rejects the malformed resource %s", async (resource, message) => {
+        const fetchSpy = mockDiscovery({ [ISSUER]: ["checkout"] });
+        expect(() => authplaneProvider({ issuer: ISSUER, resource })).toThrow(message);
+        expect(fetchSpy).not.toHaveBeenCalled();
+    });
+    it("rejects a malformed issuer before any discovery", async () => {
+        const fetchSpy = mockDiscovery({ [ISSUER]: ["checkout"] });
+        expect(() => authplaneProvider({
+            issuer: "auth.acme.com",
+            resource: "https://coffee.example.com/mcp",
+        })).toThrow(/`issuer` must be an absolute URL/);
+        expect(fetchSpy).not.toHaveBeenCalled();
+    });
+    it("accepts an issuer carrying a trailing slash", async () => {
+        // Discovery resolves the issuer itself; the provider passes it through
+        // rather than rewriting the operator's value.
+        mockDiscovery({ [ISSUER]: ["checkout"] });
+        await authplaneProvider({
+            issuer: `${ISSUER}/`,
+            resource: "https://coffee.example.com/mcp",
+        });
+        expect(jwks().issuer).toBe(ISSUER);
+    });
+    it("accepts a local http issuer for development", async () => {
+        const local = "http://localhost:9000";
+        mockDiscovery({ [local]: ["checkout"] });
+        await authplaneProvider({
+            issuer: local,
+            resource: "http://localhost:3000/mcp",
+        });
+        expect(jwks().issuer).toBe(local);
+        expect(jwks().audience).toBe("http://localhost:3000/mcp");
+    });
+    it("forwards scopes and the required-scope floor", async () => {
+        mockDiscovery({ [ISSUER]: ["checkout", "profile"] });
+        const config = await authplaneProvider({
+            issuer: ISSUER,
+            resource: "https://coffee.example.com/mcp",
+            scopes: ["checkout"],
+            requiredScopes: ["checkout"],
+        });
+        expect(config.scopesSupported).toEqual(["checkout"]);
+        expect(config.requiredScopes).toEqual(["checkout"]);
+    });
+    it("advertises the registration endpoint for dynamic client registration", async () => {
+        mockDiscovery({ [ISSUER]: ["checkout"] });
+        const config = await authplaneProvider({
+            issuer: ISSUER,
+            resource: "https://coffee.example.com/mcp",
+        });
+        expect(config.oauthMetadata.issuer).toBe(ISSUER);
+        expect(config.oauthMetadata.registration_endpoint).toBe(`${ISSUER}/register`);
+    });
+});
+//# sourceMappingURL=authplane.test.js.map

package/dist/server/auth/providers/authplane.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authplane.test.js","sourceRoot":"","sources":["../../../../src/server/auth/providers/authplane.test.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,cAAc,IAAI,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAEzD,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAEzD,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;AAEtC,MAAM,MAAM,GAAG,uBAAuB,CAAC;AAEvC,SAAS,YAAY,CAAC,MAAc,EAAE,MAAgB;IACpD,OAAO;QACL,MAAM;QACN,sBAAsB,EAAE,GAAG,MAAM,YAAY;QAC7C,cAAc,EAAE,GAAG,MAAM,QAAQ;QACjC,qBAAqB,EAAE,GAAG,MAAM,WAAW;QAC3C,wBAAwB,EAAE,CAAC,MAAM,CAAC;QAClC,gBAAgB,EAAE,MAAM;QACxB,QAAQ,EAAE,GAAG,MAAM,wBAAwB;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAA8B;IACnD,OAAO,EAAE;SACN,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC;SAC1B,kBAAkB,CAAC,KAAK,EAAE,KAAwB,EAAE,EAAE;QACrD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CACrC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,MAAM,mCAAmC,CACnE,CAAC;QACF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE;YAC1D,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC;AAED,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,gCAAgC;SAC3C,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC/D,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,wBAAwB,CAAC,CAAC;QAC/D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,gCAAgC;QAChC,mCAAmC;QACnC,6BAA6B;QAC7B,2BAA2B;QAC3B,qCAAqC;KACtC,CAAC,CAAC,iDAAiD,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;QACvE,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAErE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,6EAA6E;IAC7E,6DAA6D;IAC7D,EAAE,CAAC,IAAI,CAAC;QACN,uCAAuC;QACvC,CAAC,4BAA4B,EAAE,6BAA6B,CAAC;QAC7D,CAAC,uBAAuB,EAAE,wBAAwB,CAAC;QACnD,+BAA+B;QAC/B,CAAC,gCAAgC,EAAE,gCAAgC,CAAC;QACpE,mCAAmC;QACnC,CAAC,oCAAoC,EAAE,gCAAgC,CAAC;KACzE,CAAC,CAAC,iCAAiC,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE;QAClE,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAE3D,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CACnE,oBAAoB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAChD,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAE1C,MAAM,iBAAiB,CAAC;YACtB,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,gCAAgC;YAC1C,QAAQ,EAAE,iBAAiB;SAC5B,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,wBAAwB,EAAE,yBAAyB,CAAC;QACrD,CAAC,8BAA8B,EAAE,mCAAmC,CAAC;QACrE,CAAC,qCAAqC,EAAE,6BAA6B,CAAC;KACvE,CAAC,CAAC,mCAAmC,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QAClE,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAE3D,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CACnE,OAAO,CACR,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAE3D,MAAM,CAAC,GAAG,EAAE,CACV,iBAAiB,CAAC;YAChB,MAAM,EAAE,eAAe;YACvB,QAAQ,EAAE,gCAAgC;SAC3C,CAAC,CACH,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;QAC9C,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,uEAAuE;QACvE,8CAA8C;QAC9C,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAE1C,MAAM,iBAAiB,CAAC;YACtB,MAAM,EAAE,GAAG,MAAM,GAAG;YACpB,QAAQ,EAAE,gCAAgC;SAC3C,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,KAAK,GAAG,uBAAuB,CAAC;QACtC,aAAa,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAEzC,MAAM,iBAAiB,CAAC;YACtB,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,2BAA2B;SACtC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,gCAAgC;YAC1C,MAAM,EAAE,CAAC,UAAU,CAAC;YACpB,cAAc,EAAE,CAAC,UAAU,CAAC;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,gCAAgC;SAC3C,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC,IAAI,CACrD,GAAG,MAAM,WAAW,CACrB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["// @vitest-environment node\nimport { afterEach, describe, expect, it, vi } from \"vitest\";\nimport { authplaneProvider } from \"./authplane.js\";\nimport { lastJwksConfig as jwks } from \"./verify-spy.js\";\n\nvi.mock(\"../verify.js\", () => import(\"./verify-spy.js\"));\n\nafterEach(() => vi.restoreAllMocks());\n\nconst ISSUER = \"https://auth.acme.com\";\n\nfunction discoveryDoc(issuer: string, scopes: string[]) {\n  return {\n    issuer,\n    authorization_endpoint: `${issuer}/authorize`,\n    token_endpoint: `${issuer}/token`,\n    registration_endpoint: `${issuer}/register`,\n    response_types_supported: [\"code\"],\n    scopes_supported: scopes,\n    jwks_uri: `${issuer}/.well-known/jwks.json`,\n  };\n}\n\nfunction mockDiscovery(docs: Record<string, string[]>) {\n  return vi\n    .spyOn(globalThis, \"fetch\")\n    .mockImplementation(async (input: RequestInfo | URL) => {\n      const url = String(input);\n      const entry = Object.entries(docs).find(\n        ([issuer]) => url === `${issuer}/.well-known/openid-configuration`,\n      );\n      if (entry === undefined) {\n        return new Response(null, { status: 404 });\n      }\n      return new Response(JSON.stringify(discoveryDoc(...entry)), {\n        headers: { \"content-type\": \"application/json\" },\n      });\n    });\n}\n\ndescribe(\"authplaneProvider\", () => {\n  it(\"derives the audience from the resource the server advertises\", async () => {\n    mockDiscovery({ [ISSUER]: [\"checkout\"] });\n\n    const config = await authplaneProvider({\n      issuer: ISSUER,\n      resource: \"https://coffee.example.com/mcp\",\n    });\n\n    expect(jwks().audience).toBe(\"https://coffee.example.com/mcp\");\n    expect(jwks().issuer).toBe(ISSUER);\n    expect(jwks().jwksUri).toBe(`${ISSUER}/.well-known/jwks.json`);\n    expect(config.baseUrl).toBe(\"https://coffee.example.com/mcp\");\n  });\n\n  it.each([\n    \"https://coffee.example.com/mcp\",\n    \"https://coffee.example.com/v2/mcp\",\n    \"https://coffee.example.com/\",\n    \"http://localhost:3000/mcp\",\n    \"https://coffee.example.com:8443/mcp\",\n  ])(\"passes %s through as both resource and audience\", async (resource) => {\n    mockDiscovery({ [ISSUER]: [\"checkout\"] });\n\n    const config = await authplaneProvider({ issuer: ISSUER, resource });\n\n    expect(config.baseUrl).toBe(resource);\n    expect(jwks().audience).toBe(resource);\n  });\n\n  // The metadata router serialises the resource identifier through `URL` before\n  // advertising it. Anything that serialisation would rewrite is refused here,\n  // so the advertised identifier is always the configured one.\n  it.each([\n    // Pathless origin — gains a root path.\n    [\"https://coffee.example.com\", \"https://coffee.example.com/\"],\n    [\"http://localhost:3000\", \"http://localhost:3000/\"],\n    // Uppercase host — lowercased.\n    [\"https://COFFEE.EXAMPLE.COM/mcp\", \"https://coffee.example.com/mcp\"],\n    // Explicit default port — dropped.\n    [\"https://coffee.example.com:443/mcp\", \"https://coffee.example.com/mcp\"],\n  ])(\"rejects %s and names %s instead\", async (resource, published) => {\n    const fetchSpy = mockDiscovery({ [ISSUER]: [\"checkout\"] });\n\n    expect(() => authplaneProvider({ issuer: ISSUER, resource })).toThrow(\n      `is advertised as ${JSON.stringify(published)}`,\n    );\n    expect(fetchSpy).not.toHaveBeenCalled();\n  });\n\n  it(\"lets an explicit audience override the default\", async () => {\n    mockDiscovery({ [ISSUER]: [\"checkout\"] });\n\n    await authplaneProvider({\n      issuer: ISSUER,\n      resource: \"https://coffee.example.com/mcp\",\n      audience: \"urn:acme:coffee\",\n    });\n\n    expect(jwks().audience).toBe(\"urn:acme:coffee\");\n  });\n\n  it.each([\n    [\"coffee.example.com/mcp\", /must be an absolute URL/],\n    [\"ftp://coffee.example.com/mcp\", /must use the http or https scheme/],\n    [\"https://coffee.example.com/mcp#frag\", /must not include a fragment/],\n  ])(\"rejects the malformed resource %s\", async (resource, message) => {\n    const fetchSpy = mockDiscovery({ [ISSUER]: [\"checkout\"] });\n\n    expect(() => authplaneProvider({ issuer: ISSUER, resource })).toThrow(\n      message,\n    );\n    expect(fetchSpy).not.toHaveBeenCalled();\n  });\n\n  it(\"rejects a malformed issuer before any discovery\", async () => {\n    const fetchSpy = mockDiscovery({ [ISSUER]: [\"checkout\"] });\n\n    expect(() =>\n      authplaneProvider({\n        issuer: \"auth.acme.com\",\n        resource: \"https://coffee.example.com/mcp\",\n      }),\n    ).toThrow(/`issuer` must be an absolute URL/);\n    expect(fetchSpy).not.toHaveBeenCalled();\n  });\n\n  it(\"accepts an issuer carrying a trailing slash\", async () => {\n    // Discovery resolves the issuer itself; the provider passes it through\n    // rather than rewriting the operator's value.\n    mockDiscovery({ [ISSUER]: [\"checkout\"] });\n\n    await authplaneProvider({\n      issuer: `${ISSUER}/`,\n      resource: \"https://coffee.example.com/mcp\",\n    });\n\n    expect(jwks().issuer).toBe(ISSUER);\n  });\n\n  it(\"accepts a local http issuer for development\", async () => {\n    const local = \"http://localhost:9000\";\n    mockDiscovery({ [local]: [\"checkout\"] });\n\n    await authplaneProvider({\n      issuer: local,\n      resource: \"http://localhost:3000/mcp\",\n    });\n\n    expect(jwks().issuer).toBe(local);\n    expect(jwks().audience).toBe(\"http://localhost:3000/mcp\");\n  });\n\n  it(\"forwards scopes and the required-scope floor\", async () => {\n    mockDiscovery({ [ISSUER]: [\"checkout\", \"profile\"] });\n\n    const config = await authplaneProvider({\n      issuer: ISSUER,\n      resource: \"https://coffee.example.com/mcp\",\n      scopes: [\"checkout\"],\n      requiredScopes: [\"checkout\"],\n    });\n\n    expect(config.scopesSupported).toEqual([\"checkout\"]);\n    expect(config.requiredScopes).toEqual([\"checkout\"]);\n  });\n\n  it(\"advertises the registration endpoint for dynamic client registration\", async () => {\n    mockDiscovery({ [ISSUER]: [\"checkout\"] });\n\n    const config = await authplaneProvider({\n      issuer: ISSUER,\n      resource: \"https://coffee.example.com/mcp\",\n    });\n\n    expect(config.oauthMetadata.issuer).toBe(ISSUER);\n    expect(config.oauthMetadata.registration_endpoint).toBe(\n      `${ISSUER}/register`,\n    );\n  });\n});\n"]}

package/dist/server/auth/providers/clerk.d.ts

@@ -1,5 +1,42 @@
+import type { ExtraClaims } from "../../auth.js";
 import type { OAuthConfig } from "../index.js";
+import type { RegisteredClaims } from "../verify.js";
 import { type CustomProviderOptions } from "./custom.js";
+/**
+ * Claims a Clerk session token (v2) carries. All optional: `o` and `act` appear
+ * only with organizations and impersonation, and `email` only when a JWT
+ * template adds it.
+ *
+ * @see https://clerk.com/docs/backend-requests/resources/session-tokens
+ * @see https://clerk.com/docs/backend-requests/jwt-templates
+ */
+export type ClerkClaims = {
+    /** Session id. */
+    sid?: string;
+    /** Authorized party: the origin the token was issued to. */
+    azp?: string;
+    /** Session token version. */
+    v?: number;
+    /** Factor verification age, `[since-first-factor, since-second-factor]`. */
+    fva?: number[];
+    /** Active organization, when the user has one. */
+    o?: {
+        /** Organization id. */
+        id?: string;
+        /** Organization slug. */
+        slg?: string;
+        /** Role within the organization. */
+        rol?: string;
+        /** Permissions within the organization. */
+        per?: string;
+        /** Feature-permission map backing `per`. */
+        fpm?: string;
+    };
+    /** Actor, present while a user is being impersonated. */
+    act?: Record<string, unknown>;
+    /** Only when a JWT template adds it; not a default Clerk claim. */
+    email?: string;
+};
 /**
  * OAuth provider for Clerk. `domain` is the Frontend API URL (e.g.
  * `acme.clerk.accounts.dev`, or a production custom domain). Requires Dynamic
@@ -9,6 +46,6 @@ import { type CustomProviderOptions } from "./custom.js";
  * Clerk access tokens carry no `aud` claim, so there is no `audience` option —
  * verification is issuer + JWKS only (matching Clerk's own `mcpAuthClerk`).
  */
-export declare function clerkProvider(opts: {
+export declare function clerkProvider<TCustom extends ExtraClaims = Record<never, never>>(opts: {
     domain: string;
-} & Omit<CustomProviderOptions, "issuer" | "audience">): Promise<OAuthConfig>;
+} & Omit<CustomProviderOptions, "issuer" | "audience">): Promise<OAuthConfig<ClerkClaims & TCustom & RegisteredClaims>>;

package/dist/server/auth/providers/clerk.js

@@ -11,6 +11,9 @@ import { toIssuerUrl } from "./shared.js";
  */
 export function clerkProvider(opts) {
     const { domain, ...rest } = opts;
-    return customProvider({ issuer: toIssuerUrl(domain), ...rest });
+    return customProvider({
+        issuer: toIssuerUrl(domain),
+        ...rest,
+    });
 }
 //# sourceMappingURL=clerk.js.map