zuplo 6.72.3 → 6.72.8

package/docs/policies/mcp-logto-oauth-inbound/schema.json

@@ -57,6 +57,7 @@
             },
             "gateway": {
               "type": "object",
+              "x-advanced": true,
               "description": "Gateway-side OAuth token settings. The gateway issuer and advertised URLs are derived from the incoming request origin.",
               "additionalProperties": false,
               "properties": {
@@ -79,8 +80,88 @@
                 }
               }
             },
+            "idJag": {
+              "x-advanced": true,
+              "description": "Optional Identity Assertion JWT Authorization Grant (ID-JAG / XAA) support for the gateway token endpoint.",
+              "oneOf": [
+                {
+                  "type": "object",
+                  "additionalProperties": false,
+                  "required": ["enabled"],
+                  "properties": {
+                    "enabled": {
+                      "const": false,
+                      "description": "Disable ID-JAG support."
+                    }
+                  }
+                },
+                {
+                  "type": "object",
+                  "additionalProperties": false,
+                  "required": ["enabled"],
+                  "properties": {
+                    "enabled": {
+                      "const": true,
+                      "description": "Enable ID-JAG support."
+                    },
+                    "trustedIssuers": {
+                      "type": "array",
+                      "minItems": 1,
+                      "description": "Trusted ID-JAG issuers. These values are never published in OAuth metadata. Omit to trust this policy's browser-login IdP.",
+                      "items": {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "dependentRequired": {
+                          "issuer": ["jwksUrl"],
+                          "jwksUrl": ["issuer"]
+                        },
+                        "properties": {
+                          "issuer": {
+                            "type": "string",
+                            "format": "uri",
+                            "description": "Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP."
+                          },
+                          "jwksUrl": {
+                            "type": "string",
+                            "format": "uri",
+                            "description": "JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP."
+                          },
+                          "expectedClientIds": {
+                            "type": "array",
+                            "items": {
+                              "type": "string",
+                              "minLength": 1
+                            },
+                            "description": "Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client."
+                          },
+                          "subjectMapping": {
+                            "type": "string",
+                            "enum": [
+                              "iss_prefix",
+                              "iss_tenant_prefix",
+                              "sub_id_only"
+                            ],
+                            "default": "iss_prefix",
+                            "description": "How the ID-JAG subject is mapped into the gateway subject ID."
+                          }
+                        }
+                      }
+                    },
+                    "authorizationDetailsTypesAllowed": {
+                      "type": "array",
+                      "items": {
+                        "type": "string",
+                        "minLength": 1
+                      },
+                      "description": "Optional allow-list of RFC 9396 authorization_details type values accepted from ID-JAGs."
+                    }
+                  }
+                }
+              ]
+            },
             "browserLoginOverrides": {
               "type": "object",
+              "x-advanced": true,
               "description": "Optional overrides for the derived browser-login settings.",
               "additionalProperties": false,
               "properties": {

package/docs/policies/mcp-oauth-inbound/schema.json

@@ -126,6 +126,7 @@
             },
             "gateway": {
               "type": "object",
+              "x-advanced": true,
               "description": "Gateway-side OAuth token settings. The gateway issuer and advertised URLs are derived from the incoming request origin.",
               "additionalProperties": false,
               "properties": {
@@ -149,6 +150,7 @@
               }
             },
             "idJag": {
+              "x-advanced": true,
               "description": "Optional Identity Assertion JWT Authorization Grant (ID-JAG / XAA) support for the gateway token endpoint.",
               "oneOf": [
                 {
@@ -165,7 +167,7 @@
                 {
                   "type": "object",
                   "additionalProperties": false,
-                  "required": ["enabled", "trustedIssuers"],
+                  "required": ["enabled"],
                   "properties": {
                     "enabled": {
                       "const": true,
@@ -174,21 +176,24 @@
                     "trustedIssuers": {
                       "type": "array",
                       "minItems": 1,
-                      "description": "Trusted ID-JAG issuers. These values are never published in OAuth metadata.",
+                      "description": "Trusted ID-JAG issuers. These values are never published in OAuth metadata. Omit to trust this policy's browser-login IdP.",
                       "items": {
                         "type": "object",
                         "additionalProperties": false,
-                        "required": ["issuer", "jwksUrl"],
+                        "dependentRequired": {
+                          "issuer": ["jwksUrl"],
+                          "jwksUrl": ["issuer"]
+                        },
                         "properties": {
                           "issuer": {
                             "type": "string",
                             "format": "uri",
-                            "description": "Exact issuer URL expected in the ID-JAG iss claim."
+                            "description": "Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP."
                           },
                           "jwksUrl": {
                             "type": "string",
                             "format": "uri",
-                            "description": "JWKS URL used to verify ID-JAG signatures from this issuer."
+                            "description": "JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP."
                           },
                           "expectedClientIds": {
                             "type": "array",

package/docs/policies/mcp-okta-oauth-inbound/schema.json

@@ -62,6 +62,7 @@
             },
             "gateway": {
               "type": "object",
+              "x-advanced": true,
               "description": "Gateway-side OAuth token settings. The gateway issuer and advertised URLs are derived from the incoming request origin.",
               "additionalProperties": false,
               "properties": {
@@ -84,8 +85,88 @@
                 }
               }
             },
+            "idJag": {
+              "x-advanced": true,
+              "description": "Optional Identity Assertion JWT Authorization Grant (ID-JAG / XAA) support for the gateway token endpoint.",
+              "oneOf": [
+                {
+                  "type": "object",
+                  "additionalProperties": false,
+                  "required": ["enabled"],
+                  "properties": {
+                    "enabled": {
+                      "const": false,
+                      "description": "Disable ID-JAG support."
+                    }
+                  }
+                },
+                {
+                  "type": "object",
+                  "additionalProperties": false,
+                  "required": ["enabled"],
+                  "properties": {
+                    "enabled": {
+                      "const": true,
+                      "description": "Enable ID-JAG support."
+                    },
+                    "trustedIssuers": {
+                      "type": "array",
+                      "minItems": 1,
+                      "description": "Trusted ID-JAG issuers. These values are never published in OAuth metadata. Omit to trust this policy's browser-login IdP.",
+                      "items": {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "dependentRequired": {
+                          "issuer": ["jwksUrl"],
+                          "jwksUrl": ["issuer"]
+                        },
+                        "properties": {
+                          "issuer": {
+                            "type": "string",
+                            "format": "uri",
+                            "description": "Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP."
+                          },
+                          "jwksUrl": {
+                            "type": "string",
+                            "format": "uri",
+                            "description": "JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP."
+                          },
+                          "expectedClientIds": {
+                            "type": "array",
+                            "items": {
+                              "type": "string",
+                              "minLength": 1
+                            },
+                            "description": "Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client."
+                          },
+                          "subjectMapping": {
+                            "type": "string",
+                            "enum": [
+                              "iss_prefix",
+                              "iss_tenant_prefix",
+                              "sub_id_only"
+                            ],
+                            "default": "iss_prefix",
+                            "description": "How the ID-JAG subject is mapped into the gateway subject ID."
+                          }
+                        }
+                      }
+                    },
+                    "authorizationDetailsTypesAllowed": {
+                      "type": "array",
+                      "items": {
+                        "type": "string",
+                        "minLength": 1
+                      },
+                      "description": "Optional allow-list of RFC 9396 authorization_details type values accepted from ID-JAGs."
+                    }
+                  }
+                }
+              ]
+            },
             "browserLoginOverrides": {
               "type": "object",
+              "x-advanced": true,
               "description": "Optional overrides for the derived browser-login settings.",
               "additionalProperties": false,
               "properties": {

package/docs/policies/mcp-onelogin-oauth-inbound/schema.json

@@ -57,6 +57,7 @@
             },
             "gateway": {
               "type": "object",
+              "x-advanced": true,
               "description": "Gateway-side OAuth token settings. The gateway issuer and advertised URLs are derived from the incoming request origin.",
               "additionalProperties": false,
               "properties": {
@@ -79,8 +80,88 @@
                 }
               }
             },
+            "idJag": {
+              "x-advanced": true,
+              "description": "Optional Identity Assertion JWT Authorization Grant (ID-JAG / XAA) support for the gateway token endpoint.",
+              "oneOf": [
+                {
+                  "type": "object",
+                  "additionalProperties": false,
+                  "required": ["enabled"],
+                  "properties": {
+                    "enabled": {
+                      "const": false,
+                      "description": "Disable ID-JAG support."
+                    }
+                  }
+                },
+                {
+                  "type": "object",
+                  "additionalProperties": false,
+                  "required": ["enabled"],
+                  "properties": {
+                    "enabled": {
+                      "const": true,
+                      "description": "Enable ID-JAG support."
+                    },
+                    "trustedIssuers": {
+                      "type": "array",
+                      "minItems": 1,
+                      "description": "Trusted ID-JAG issuers. These values are never published in OAuth metadata. Omit to trust this policy's browser-login IdP.",
+                      "items": {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "dependentRequired": {
+                          "issuer": ["jwksUrl"],
+                          "jwksUrl": ["issuer"]
+                        },
+                        "properties": {
+                          "issuer": {
+                            "type": "string",
+                            "format": "uri",
+                            "description": "Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP."
+                          },
+                          "jwksUrl": {
+                            "type": "string",
+                            "format": "uri",
+                            "description": "JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP."
+                          },
+                          "expectedClientIds": {
+                            "type": "array",
+                            "items": {
+                              "type": "string",
+                              "minLength": 1
+                            },
+                            "description": "Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client."
+                          },
+                          "subjectMapping": {
+                            "type": "string",
+                            "enum": [
+                              "iss_prefix",
+                              "iss_tenant_prefix",
+                              "sub_id_only"
+                            ],
+                            "default": "iss_prefix",
+                            "description": "How the ID-JAG subject is mapped into the gateway subject ID."
+                          }
+                        }
+                      }
+                    },
+                    "authorizationDetailsTypesAllowed": {
+                      "type": "array",
+                      "items": {
+                        "type": "string",
+                        "minLength": 1
+                      },
+                      "description": "Optional allow-list of RFC 9396 authorization_details type values accepted from ID-JAGs."
+                    }
+                  }
+                }
+              ]
+            },
             "browserLoginOverrides": {
               "type": "object",
+              "x-advanced": true,
               "description": "Optional overrides for the derived browser-login settings.",
               "additionalProperties": false,
               "properties": {

package/docs/policies/mcp-ping-oauth-inbound/schema.json

@@ -75,6 +75,7 @@
             },
             "gateway": {
               "type": "object",
+              "x-advanced": true,
               "description": "Gateway-side OAuth token settings. The gateway issuer and advertised URLs are derived from the incoming request origin.",
               "additionalProperties": false,
               "properties": {
@@ -97,8 +98,88 @@
                 }
               }
             },
+            "idJag": {
+              "x-advanced": true,
+              "description": "Optional Identity Assertion JWT Authorization Grant (ID-JAG / XAA) support for the gateway token endpoint.",
+              "oneOf": [
+                {
+                  "type": "object",
+                  "additionalProperties": false,
+                  "required": ["enabled"],
+                  "properties": {
+                    "enabled": {
+                      "const": false,
+                      "description": "Disable ID-JAG support."
+                    }
+                  }
+                },
+                {
+                  "type": "object",
+                  "additionalProperties": false,
+                  "required": ["enabled"],
+                  "properties": {
+                    "enabled": {
+                      "const": true,
+                      "description": "Enable ID-JAG support."
+                    },
+                    "trustedIssuers": {
+                      "type": "array",
+                      "minItems": 1,
+                      "description": "Trusted ID-JAG issuers. These values are never published in OAuth metadata. Omit to trust this policy's browser-login IdP.",
+                      "items": {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "dependentRequired": {
+                          "issuer": ["jwksUrl"],
+                          "jwksUrl": ["issuer"]
+                        },
+                        "properties": {
+                          "issuer": {
+                            "type": "string",
+                            "format": "uri",
+                            "description": "Exact issuer URL expected in the ID-JAG iss claim. Provide together with jwksUrl, or omit both to default to this policy's browser-login IdP."
+                          },
+                          "jwksUrl": {
+                            "type": "string",
+                            "format": "uri",
+                            "description": "JWKS URL used to verify ID-JAG signatures from this issuer. Provide together with issuer, or omit both to default to this policy's browser-login IdP."
+                          },
+                          "expectedClientIds": {
+                            "type": "array",
+                            "items": {
+                              "type": "string",
+                              "minLength": 1
+                            },
+                            "description": "Optional allow-list of client IDs accepted from this issuer. The ID-JAG client_id must still match the authenticated token-endpoint client."
+                          },
+                          "subjectMapping": {
+                            "type": "string",
+                            "enum": [
+                              "iss_prefix",
+                              "iss_tenant_prefix",
+                              "sub_id_only"
+                            ],
+                            "default": "iss_prefix",
+                            "description": "How the ID-JAG subject is mapped into the gateway subject ID."
+                          }
+                        }
+                      }
+                    },
+                    "authorizationDetailsTypesAllowed": {
+                      "type": "array",
+                      "items": {
+                        "type": "string",
+                        "minLength": 1
+                      },
+                      "description": "Optional allow-list of RFC 9396 authorization_details type values accepted from ID-JAGs."
+                    }
+                  }
+                }
+              ]
+            },
             "browserLoginOverrides": {
               "type": "object",
+              "x-advanced": true,
               "description": "Optional overrides for the derived browser-login settings.",
               "additionalProperties": false,
               "properties": {

package/docs/policies/mcp-token-exchange-inbound/doc.md

@@ -4,10 +4,11 @@ The `mcp-token-exchange-inbound` policy resolves gateway-managed upstream MCP
 credentials and applies them to the request before the normal Zuplo route
 handler forwards it.
 
-Use this policy only when Zuplo manages upstream OAuth credentials, such as
-per-user OAuth or shared OAuth. If the upstream is public, uses an API key
-header, or only needs static routing/context headers, omit this policy and
-compose the existing Zuplo header/auth policies instead.
+Use this policy only when Zuplo manages upstream credentials: per-user OAuth
+(`user-oauth`), a gateway-wide shared OAuth grant (`shared-oauth`), or ID-JAG
+token exchange (`id-jag`). If the upstream is public, uses an API key header, or
+only needs static routing/context headers, omit this policy and compose the
+existing Zuplo header/auth policies instead.
 
 Zuplo is only the gateway. It discovers the upstream MCP server, sends users
 through the upstream OAuth flow, stores the resulting upstream connection, and
@@ -107,6 +108,73 @@ as Entra tenant admin consent. If connections start requiring frequent
 reauthorization after setting `prompt: false`, remove the option so the consent
 grant is requested again.
 
+## ID-JAG Token Exchange (Cross-App Access)
+
+Set `authMode` to `id-jag` when the upstream is protected by an Identity
+Assertion JWT Authorization Grant (ID-JAG) Resource Authorization Server, the
+pattern also known as Cross-App Access (XAA). Instead of sending users through
+the upstream's browser OAuth flow, the gateway obtains the upstream credential
+in two server-to-server steps:
+
+1. **IdP token exchange**: the gateway exchanges the caller's identity assertion
+   at the configured identity provider's token endpoint for an ID-JAG, sending
+   the configured `audience` (the Resource Authorization Server) and `resource`
+   (the upstream MCP server).
+2. **Resource AS redemption**: the gateway redeems the ID-JAG at the upstream
+   Resource Authorization Server's token endpoint using the `jwt-bearer` grant
+   and receives the upstream access token it attaches to the forwarded request.
+
+Use this mode in enterprise deployments where the gateway and the upstream
+trust the same identity provider (for example, Okta Cross-App Access), so
+upstream access follows the caller's identity without a per-user upstream
+consent flow. The `user-oauth`/`shared-oauth` options — `scopes`,
+`scopeDelimiter`, `prompt`, and `clientRegistration` — do not apply; the
+`id-jag` mode is configured entirely through the `idJag` option.
+
+```json
+{
+  "name": "mcp-token-exchange-acme",
+  "policyType": "mcp-token-exchange-inbound",
+  "handler": {
+    "module": "$import(@zuplo/runtime/mcp-gateway)",
+    "export": "McpTokenExchangeInboundPolicy",
+    "options": {
+      "displayName": "Acme",
+      "authMode": "id-jag",
+      "idJag": {
+        "scopes": ["mcp:tools"],
+        "idp": {
+          "tokenUrl": "https://idp.example.com/oauth2/token",
+          "clientAuth": {
+            "method": "client_secret_post",
+            "clientId": "gateway-client",
+            "clientSecret": "$env(IDP_CLIENT_SECRET)"
+          }
+        },
+        "resourceAs": {
+          "tokenUrl": "https://auth.acme-mcp.example.com/oauth2/token",
+          "audience": "https://auth.acme-mcp.example.com",
+          "resource": "https://mcp.acme.example.com/mcp",
+          "clientAuth": {
+            "method": "client_secret_post",
+            "clientId": "gateway-resource-client",
+            "clientSecret": "$env(RESOURCE_AS_CLIENT_SECRET)"
+          }
+        }
+      }
+    }
+  }
+}
+```
+
+Both `clientAuth` blocks also accept `client_secret_basic` and
+`private_key_jwt`. Use `private_key_jwt` for providers such as Okta that
+require a signed client assertion for token exchange; it takes `privateKeyPem`,
+an optional `keyId`, and an `algorithm` (default `RS256`). Source secrets and
+private keys from environment variables with `$env(VAR_NAME)`. When `resource`
+is omitted, the gateway defaults it to the upstream MCP server URL from the
+route handler's `rewritePattern`.
+
 ## Route Shape
 
 Publish both MCP transport methods as one Zuplo multi-method operation using

package/docs/policies/mcp-token-exchange-inbound/intro.md

@@ -1,6 +1,7 @@
 Resolve gateway-managed upstream MCP credentials and apply them to the request.
 
-Use this after gateway auth when the upstream requires Zuplo-managed OAuth. Omit
-it for public upstreams or upstreams handled by ordinary Zuplo header/API-key
-policies. The route should use `McpProxyHandler` with the upstream URL
-configured on the handler.
+Use this after gateway auth when the upstream requires Zuplo-managed
+credentials: per-user OAuth, shared OAuth, or ID-JAG (Cross-App Access) token
+exchange. Omit it for public upstreams or upstreams handled by ordinary Zuplo
+header/API-key policies. The route should use `McpProxyHandler` with the
+upstream URL configured on the handler.