tiny-http-mcp-server 0.1.43 → 0.1.44

package/dist/composition.json

@@ -18,7 +18,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.43",
+      "version": "0.1.44",
       "license": "MIT"
     },
     {

package/node_modules/mcp-oauth/README.md

@@ -29,6 +29,8 @@ const verifier = createJwksTokenVerifier({
 - `createAuthStoreSessionStore(options)`: persisted OAuth session store backed by `auth-store`.
 - `createLoopbackAuthorizationSession(options)`: local callback server for browser authorization.
 - `generateCodeVerifier()` and `generateCodeChallenge(...)`: PKCE helpers.
+- `normalizeStoredOAuthClient(value)`: normalize a saved client identity, full registration and ownership marker.
+- `normalizeOAuthScope(value)`: validate scope syntax and normalize its case-sensitive set.
 - `canonicalizeResourceIndicator(value)`: resource indicator canonicalization.
 - `createJwksTokenVerifier(options)`: JWKS-backed access-token verifier for MCP servers.
 - `OAuthError`: token endpoint error type.

package/node_modules/mcp-oauth/dist/http-fetch.js

@@ -1,8 +1,45 @@
 export async function fetchMcpResponse(fetchImplementation, input, init = {}) {
-    const response = await fetchImplementation(input, { ...init, redirect: "error" });
-    if (response.redirected || response.type === "opaqueredirect") {
-        void response.body?.cancel().catch(() => undefined);
-        throw new Error("MCP HTTP redirects are not allowed");
-    }
-    return response;
+    const signal = init.signal;
+    signal?.throwIfAborted();
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const finish = (error, response) => {
+            if (settled)
+                return;
+            settled = true;
+            signal?.removeEventListener("abort", abort);
+            if (response === undefined)
+                reject(error);
+            else
+                resolve(response);
+        };
+        const abort = () => finish(signal?.reason);
+        signal?.addEventListener("abort", abort, { once: true });
+        if (signal?.aborted) {
+            abort();
+            return;
+        }
+        let pending;
+        try {
+            pending = fetchImplementation(input, { ...init, redirect: "error" });
+        }
+        catch (error) {
+            finish(error);
+            return;
+        }
+        void pending.then(response => {
+            if (settled || signal?.aborted) {
+                void response.body?.cancel().catch(() => undefined);
+                if (!settled)
+                    abort();
+                return;
+            }
+            if (response.redirected || response.type === "opaqueredirect") {
+                void response.body?.cancel().catch(() => undefined);
+                finish(new Error("MCP HTTP redirects are not allowed"));
+            }
+            else
+                finish(undefined, response);
+        }, error => finish(error));
+    });
 }

package/node_modules/mcp-oauth/dist/index.d.ts

@@ -1,9 +1,10 @@
+export { normalizeOAuthScope } from "./client/scope.js";
 export { parseOAuthTokenGrant } from "./client/token-grant.js";
 export type { OAuthTokenGrantImportOptions } from "./client/token-grant.js";
 export { createAuthStoreSessionStore, } from "./client/auth-store-session-store.js";
 export { createResourceBoundOAuthStores } from "./client/resource-bound-store.js";
 export type { ResourceBoundOAuthStores } from "./client/resource-bound-store.js";
-export { parseOAuthClientRegistration } from "./client/client-registration.js";
+export { parseOAuthClientRegistration, normalizeStoredOAuthClient } from "./client/client-registration.js";
 export { createDefaultOAuthClientProvider, createOAuthClientProvider, } from "./client/default-oauth-client-provider.js";
 export { buildSuccessPage, createLoopbackAuthorizationSession, extractCodeFromInput, } from "./client/loopback-authorization.js";
 export { generateCodeChallenge, generateCodeVerifier, } from "./client/pkce.js";

package/node_modules/mcp-oauth/dist/index.js

@@ -1,7 +1,8 @@
+export { normalizeOAuthScope } from "./client/scope.js";
 export { parseOAuthTokenGrant } from "./client/token-grant.js";
 export { createAuthStoreSessionStore, } from "./client/auth-store-session-store.js";
 export { createResourceBoundOAuthStores } from "./client/resource-bound-store.js";
-export { parseOAuthClientRegistration } from "./client/client-registration.js";
+export { parseOAuthClientRegistration, normalizeStoredOAuthClient } from "./client/client-registration.js";
 export { createDefaultOAuthClientProvider, createOAuthClientProvider, } from "./client/default-oauth-client-provider.js";
 export { buildSuccessPage, createLoopbackAuthorizationSession, extractCodeFromInput, } from "./client/loopback-authorization.js";
 export { generateCodeChallenge, generateCodeVerifier, } from "./client/pkce.js";

package/node_modules/tiny-mcp-client/dist/index.js

@@ -3395,6 +3395,16 @@ var SubscriptionManager = class {
   }
 };
 
+// ../mcp-oauth/dist/client/scope.js
+function normalizeOAuthScope(scope) {
+  if (scope === void 0)
+    return void 0;
+  if (typeof scope !== "string" || [...scope].some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) > 126 || char === '"' || char === "\\"))
+    throw new Error("Invalid OAuth scope syntax");
+  const normalized = [...new Set(scope.split(" ").filter(Boolean))].sort().join(" ");
+  return normalized || void 0;
+}
+
 // ../mcp-oauth/dist/client/bounded-json.js
 function copyBoundedOAuthJson(value, message) {
   const invalid = () => new Error(message);
@@ -3441,16 +3451,6 @@ function copyBoundedOAuthJson(value, message) {
   return result;
 }
 
-// ../mcp-oauth/dist/client/scope.js
-function normalizeOAuthScope(scope) {
-  if (scope === void 0)
-    return void 0;
-  if (typeof scope !== "string" || [...scope].some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) > 126 || char === '"' || char === "\\"))
-    throw new Error("Invalid OAuth scope syntax");
-  const normalized = [...new Set(scope.split(" ").filter(Boolean))].sort().join(" ");
-  return normalized || void 0;
-}
-
 // ../mcp-oauth/dist/client/loopback-authorization.js
 import http from "node:http";
 
@@ -4898,12 +4898,47 @@ import { isIP } from "node:net";
 
 // ../mcp-oauth/dist/http-fetch.js
 async function fetchMcpResponse(fetchImplementation, input, init = {}) {
-  const response = await fetchImplementation(input, { ...init, redirect: "error" });
-  if (response.redirected || response.type === "opaqueredirect") {
-    void response.body?.cancel().catch(() => void 0);
-    throw new Error("MCP HTTP redirects are not allowed");
-  }
-  return response;
+  const signal = init.signal;
+  signal?.throwIfAborted();
+  return new Promise((resolve, reject) => {
+    let settled = false;
+    const finish = (error, response) => {
+      if (settled)
+        return;
+      settled = true;
+      signal?.removeEventListener("abort", abort);
+      if (response === void 0)
+        reject(error);
+      else
+        resolve(response);
+    };
+    const abort = () => finish(signal?.reason);
+    signal?.addEventListener("abort", abort, { once: true });
+    if (signal?.aborted) {
+      abort();
+      return;
+    }
+    let pending;
+    try {
+      pending = fetchImplementation(input, { ...init, redirect: "error" });
+    } catch (error) {
+      finish(error);
+      return;
+    }
+    void pending.then((response) => {
+      if (settled || signal?.aborted) {
+        void response.body?.cancel().catch(() => void 0);
+        if (!settled)
+          abort();
+        return;
+      }
+      if (response.redirected || response.type === "opaqueredirect") {
+        void response.body?.cancel().catch(() => void 0);
+        finish(new Error("MCP HTTP redirects are not allowed"));
+      } else
+        finish(void 0, response);
+    }, (error) => finish(error));
+  });
 }
 
 // ../mcp-oauth/dist/client/default-oauth-client-provider.js

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tiny-http-mcp-server",
-  "version": "0.1.43",
+  "version": "0.1.44",
   "description": "Minimal MCP server over HTTP built on tiny-stdio-mcp-server",
   "type": "module",
   "main": "dist/index.js",