aiohttp-tiny-mcp 0.4.0__tar.gz → 0.4.1__tar.gz

{aiohttp_tiny_mcp-0.4.0 → aiohttp_tiny_mcp-0.4.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aiohttp-tiny-mcp
-Version: 0.4.0
+Version: 0.4.1
 Summary: Remote MCP server and client library for aiohttp
 License-Expression: Apache-2.0
 License-File: LICENSE
@@ -173,8 +173,8 @@ Console("/mcp", title="Demo").setup(app, "/console")
 
 Open `http://127.0.0.1:8080/console`. It speaks the protocol itself on any of
 the five revisions, builds a form from each tool's schema, answers the
-questions a handler asks, and shows every message either way. Three files from
-this package, no build step and no second process.
+questions a handler asks, and shows every message either way. Static files from
+this package need no build step or second process.
 
 An MCP host that supports Streamable HTTP can connect to
 `http://127.0.0.1:8080/mcp`. In an existing aiohttp service, use
@@ -235,7 +235,7 @@ Start with [the documentation overview](https://mosquito.github.io/aiohttp-tiny-
 2. [Quickstart](https://mosquito.github.io/aiohttp-tiny-mcp/quickstart.html): a complete server, launch command, and client call.
 3. [How the server fits together](https://mosquito.github.io/aiohttp-tiny-mcp/pieces.html): a conversation across two workers and each object's lifetime.
 4. [Using Exchange](https://mosquito.github.io/aiohttp-tiny-mcp/guide/exchange.html): request context, progress, questions, and state.
-5. [Authentication](https://mosquito.github.io/aiohttp-tiny-mcp/guide/auth.html): Basic, Bearer, custom subclasses, multiple policies, and permissions.
+5. [Authentication](https://mosquito.github.io/aiohttp-tiny-mcp/guide/auth.html): Basic, Bearer, GitHub sign-in, custom policies, and permissions.
 6. [Stores and hubs](https://mosquito.github.io/aiohttp-tiny-mcp/deployment/stores.html): shared backend contracts and deployment requirements.
 7. [Extensions and skills](https://mosquito.github.io/aiohttp-tiny-mcp/guide/extensions.html): custom methods, skill directories, and resources for older clients.
 

{aiohttp_tiny_mcp-0.4.0 → aiohttp_tiny_mcp-0.4.1}/README.md

@@ -131,8 +131,8 @@ Console("/mcp", title="Demo").setup(app, "/console")
 
 Open `http://127.0.0.1:8080/console`. It speaks the protocol itself on any of
 the five revisions, builds a form from each tool's schema, answers the
-questions a handler asks, and shows every message either way. Three files from
-this package, no build step and no second process.
+questions a handler asks, and shows every message either way. Static files from
+this package need no build step or second process.
 
 An MCP host that supports Streamable HTTP can connect to
 `http://127.0.0.1:8080/mcp`. In an existing aiohttp service, use
@@ -193,7 +193,7 @@ Start with [the documentation overview](https://mosquito.github.io/aiohttp-tiny-
 2. [Quickstart](https://mosquito.github.io/aiohttp-tiny-mcp/quickstart.html): a complete server, launch command, and client call.
 3. [How the server fits together](https://mosquito.github.io/aiohttp-tiny-mcp/pieces.html): a conversation across two workers and each object's lifetime.
 4. [Using Exchange](https://mosquito.github.io/aiohttp-tiny-mcp/guide/exchange.html): request context, progress, questions, and state.
-5. [Authentication](https://mosquito.github.io/aiohttp-tiny-mcp/guide/auth.html): Basic, Bearer, custom subclasses, multiple policies, and permissions.
+5. [Authentication](https://mosquito.github.io/aiohttp-tiny-mcp/guide/auth.html): Basic, Bearer, GitHub sign-in, custom policies, and permissions.
 6. [Stores and hubs](https://mosquito.github.io/aiohttp-tiny-mcp/deployment/stores.html): shared backend contracts and deployment requirements.
 7. [Extensions and skills](https://mosquito.github.io/aiohttp-tiny-mcp/guide/extensions.html): custom methods, skill directories, and resources for older clients.
 

{aiohttp_tiny_mcp-0.4.0 → aiohttp_tiny_mcp-0.4.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "aiohttp-tiny-mcp"
-version = "0.4.0"
+version = "0.4.1"
 description = "Remote MCP server and client library for aiohttp"
 readme = "README.md"
 license = "Apache-2.0"

{aiohttp_tiny_mcp-0.4.0 → aiohttp_tiny_mcp-0.4.1}/pyproject.toml.orig

@@ -1,6 +1,6 @@
 [project]
 name = "aiohttp-tiny-mcp"
-version = "0.4.0"
+version = "0.4.1"
 description = "Remote MCP server and client library for aiohttp"
 readme = "README.md"
 license = "Apache-2.0"

{aiohttp_tiny_mcp-0.4.0 → aiohttp_tiny_mcp-0.4.1}/src/aiohttp_tiny_mcp/console/__init__.py

@@ -17,6 +17,7 @@ FILES = {
     "": ("index.html", "text/html"),
     "console.js": ("console.js", "application/javascript"),
     "console.css": ("console.css", "text/css"),
+    "oauth-callback": ("oauth-callback.html", "text/html"),
 }
 
 
@@ -31,12 +32,14 @@ class Console:
         description: str = "",
         template: str | Path | None = None,
         variables: Mapping[str, str] | None = None,
+        oauth_client_id: str | None = None,
     ) -> None:
         self.endpoint_path = endpoint_path
         self.title = title
         self.description = description
         self.template = Path(template) if template else HERE / "index.html"
         self.variables = dict(variables or {})
+        self.oauth_client_id = oauth_client_id
 
     def substitutions(self, base: str) -> dict[str, str]:
         return {
@@ -44,6 +47,7 @@ class Console:
             "BASE": base,
             "TITLE": self.title,
             "DESCRIPTION": self.description,
+            "OAUTH_CLIENT_ID": self.oauth_client_id or "",
             **self.variables,
         }
 
@@ -80,7 +84,7 @@ class Console:
         )
 
     def routes(self, path: str = "/console") -> list[web.RouteDef]:
-        """The page, either way it is addressed, and its two files."""
+        """The page, its assets, and the OAuth callback page."""
         base = path.rstrip("/")
         log.debug("console at %s, for the endpoint at %s", base, self.endpoint_path)
         return [
@@ -89,6 +93,22 @@ class Console:
             web.get(f"{base}/{{file}}", self.handle),
         ]
 
+    @staticmethod
+    def is_public(request: web.Request) -> bool:
+        """Identify a mounted console asset for application authentication middleware.
+
+        Check the resolved handler, method, and file allowlist. No path prefix
+        is trusted, and an unmounted console grants no exemptions.
+        """
+        handler = request.match_info.handler
+        console = getattr(handler, "__self__", None)
+        return (
+            request.method in {"GET", "HEAD"}
+            and isinstance(console, Console)
+            and handler == console.handle
+            and request.match_info.get("file", "") in FILES
+        )
+
     def setup(self, app: web.Application, path: str = "/console") -> web.Application:
         log.debug("adding the console routes to %r", app)
         app.add_routes(self.routes(path))

{aiohttp_tiny_mcp-0.4.0 → aiohttp_tiny_mcp-0.4.1}/src/aiohttp_tiny_mcp/console/console.css

@@ -75,7 +75,7 @@ body {
 .field.grow > input { flex: 1 1 auto; min-width: 8em; }
 .field > span { color: var(--ink-soft); font-size: 12px; }
 
-input[type="text"], input[type="number"], select, textarea {
+input[type="text"], input[type="password"], input[type="number"], select, textarea {
   font: inherit;
   color: inherit;
   background: var(--page);
@@ -84,7 +84,7 @@ input[type="text"], input[type="number"], select, textarea {
   padding: 5px 8px;
 }
 
-input[type="text"]:focus, select:focus, textarea:focus, input[type="number"]:focus {
+input[type="text"]:focus, input[type="password"]:focus, select:focus, textarea:focus, input[type="number"]:focus {
   outline: 2px solid var(--accent);
   outline-offset: -1px;
 }
@@ -532,3 +532,10 @@ dialog.question #question-text p { margin: 0 0 8px; }
 dialog.question #question-text :last-child { margin-bottom: 0; }
 dialog.question menu { display: flex; justify-content: flex-end; gap: 8px; margin: 18px 0 0; padding: 0; }
 dialog.question .argument { margin-bottom: 10px; }
+
+.auth-field { display: flex; flex-direction: column; gap: 4px; margin: 12px 0; }
+.auth-field[hidden] { display: none; }
+.auth-field > input, .auth-field > select { width: 100%; min-width: 0; }
+.auth-endpoint { overflow-wrap: anywhere; font-family: var(--mono); }
+.auth-help { color: var(--ink-soft); font-size: 12px; }
+.auth-error { color: var(--bad); }