mcp-proxy-adapter 6.0.0__py3-none-any.whl → 6.0.1__py3-none-any.whl

mcp_proxy_adapter/commands/token_management_command.py

@@ -40,7 +40,7 @@ class TokenManagementCommand(Command):
         self.logger = logging.getLogger(__name__)
         
         # Load configuration
-        from ..config import config
+        from ...config import config
         self.token_config = config.get("ssl", {}).get("token_auth", {})
         self.tokens_file = self.token_config.get("tokens_file", "tokens.json")
         self.token_expiry = self.token_config.get("token_expiry", 3600)

mcp_proxy_adapter/config.py

@@ -1,17 +1,20 @@
 """
 Module for microservice configuration management.
+
+Author: Vasiliy Zdanovskiy
+email: vasilyvz@gmail.com
 """
 
 import json
 import os
-from pathlib import Path
-from typing import Any, Dict, Optional
+from typing import Any, Dict, Optional, List
 
 
 class Config:
     """
     Configuration management class for the microservice.
     Allows loading settings from configuration file and environment variables.
+    Supports optional features that can be enabled/disabled.
     """
 
     def __init__(self, config_path: Optional[str] = None):
@@ -19,7 +22,8 @@ class Config:
         Initialize configuration.
 
         Args:
-            config_path: Path to configuration file. If not specified, "./config.json" is used.
+            config_path: Path to configuration file. If not specified,
+                        "./config.json" is used.
         """
         self.config_path = config_path or "./config.json"
         self.config_data: Dict[str, Any] = {}
@@ -53,10 +57,13 @@ class Config:
             },
             "commands": {
                 "auto_discovery": True,
-                "commands_directory": "./commands",  # Path to directory with command files
-                "catalog_directory": "./catalog",  # Path to command catalog directory
-                "plugin_servers": [],  # List of plugin server URLs
-                "auto_install_dependencies": True  # Automatically install plugin dependencies
+                "commands_directory": "./commands",
+                "catalog_directory": "./catalog",
+                "plugin_servers": [],
+                "auto_install_dependencies": True,
+                "enabled_commands": ["health", "echo", "list", "help"],
+                "disabled_commands": [],
+                "custom_commands_path": "./commands"
             },
             "ssl": {
                 "enabled": False,
@@ -66,8 +73,11 @@ class Config:
                 "ca_cert": None,
                 "verify_client": False,
                 "client_cert_required": False,
-                "cipher_suites": ["TLS_AES_256_GCM_SHA384", "TLS_CHACHA20_POLY1305_SHA256"],
-                "min_tls_version": "1.2",
+                "cipher_suites": [
+                    "TLS_AES_256_GCM_SHA384",
+                    "TLS_CHACHA20_POLY1305_SHA256"
+                ],
+                "min_tls_version": "TLSv1.2",
                 "max_tls_version": "1.3",
                 "token_auth": {
                     "enabled": False,
@@ -80,16 +90,16 @@ class Config:
                 }
             },
             "roles": {
-                "enabled": True,
-                "config_file": "schemas/roles_schema.json",
+                "enabled": False,
+                "config_file": None,
                 "default_policy": {
-                    "deny_by_default": True,
-                    "require_role_match": True,
+                    "deny_by_default": False,
+                    "require_role_match": False,
                     "case_sensitive": False,
-                    "allow_wildcard": True
+                    "allow_wildcard": False
                 },
-                "auto_load": True,
-                "validation_enabled": True
+                "auto_load": False,
+                "validation_enabled": False
             },
             "transport": {
                 "type": "http",
@@ -121,40 +131,103 @@ class Config:
             },
             "security": {
                 "framework": "mcp_security_framework",
-                "enabled": True,
+                "enabled": False,
+                "debug": False,
+                "environment": "dev",
+                "version": "1.0.0",
                 "auth": {
-                    "enabled": True,
+                    "enabled": False,
                     "methods": ["api_key"],
                     "api_keys": {},
+                    "user_roles": {},
                     "jwt_secret": "",
-                    "jwt_algorithm": "HS256"
+                    "jwt_algorithm": "HS256",
+                    "jwt_expiry_hours": 24,
+                    "certificate_auth": False,
+                    "certificate_roles_oid": "1.3.6.1.4.1.99999.1.1",
+                    "certificate_permissions_oid": "1.3.6.1.4.1.99999.1.2",
+                    "basic_auth": False,
+                    "oauth2_config": None,
+                    "public_paths": ["/health", "/docs", "/openapi.json"],
+                    "security_headers": None
                 },
                 "ssl": {
                     "enabled": False,
                     "cert_file": None,
                     "key_file": None,
-                    "ca_cert": None,
+                    "ca_cert_file": None,
+                    "client_cert_file": None,
+                    "client_key_file": None,
+                    "verify_mode": "CERT_NONE",
                     "min_tls_version": "TLSv1.2",
-                    "verify_client": False,
-                    "client_cert_required": False
+                    "max_tls_version": None,
+                    "cipher_suite": None,
+                    "check_hostname": True,
+                    "check_expiry": True,
+                    "expiry_warning_days": 30
+                },
+                "certificates": {
+                    "enabled": False,
+                    "ca_cert_path": None,
+                    "ca_key_path": None,
+                    "cert_storage_path": "./certs",
+                    "key_storage_path": "./keys",
+                    "default_validity_days": 365,
+                    "key_size": 2048,
+                    "hash_algorithm": "sha256",
+                    "crl_enabled": False,
+                    "crl_path": None,
+                    "crl_validity_days": 30,
+                    "auto_renewal": False,
+                    "renewal_threshold_days": 30
                 },
                 "permissions": {
-                    "enabled": True,
-                    "roles_file": "roles.json",
-                    "default_role": "user",
-                    "deny_by_default": True
+                    "enabled": False,
+                    "roles_file": None,
+                    "default_role": "guest",
+                    "admin_role": "admin",
+                    "role_hierarchy": {},
+                    "permission_cache_enabled": False,
+                    "permission_cache_ttl": 300,
+                    "wildcard_permissions": False,
+                    "strict_mode": False,
+                    "roles": None
                 },
                 "rate_limit": {
+                    "enabled": False,
+                    "default_requests_per_minute": 60,
+                    "default_requests_per_hour": 1000,
+                    "burst_limit": 2,
+                    "window_size_seconds": 60,
+                    "storage_backend": "memory",
+                    "redis_config": None,
+                    "cleanup_interval": 300,
+                    "exempt_paths": ["/health", "/docs", "/openapi.json"],
+                    "exempt_roles": ["admin"]
+                },
+                "logging": {
                     "enabled": True,
-                    "requests_per_minute": 60,
-                    "requests_per_hour": 1000,
-                    "burst_limit": 10,
-                    "by_ip": True,
-                    "by_user": True
+                    "level": "INFO",
+                    "format": "%(asctime)s - %(name)s - %(levelname)s - %(message)s",
+                    "date_format": "%Y-%m-%d %H:%M:%S",
+                    "file_path": None,
+                    "max_file_size": 10,
+                    "backup_count": 5,
+                    "console_output": True,
+                    "json_format": False,
+                    "include_timestamp": True,
+                    "include_level": True,
+                    "include_module": True
                 }
+            },
+            "protocols": {
+                "enabled": True,
+                "allowed_protocols": ["http", "jsonrpc"],
+                "default_protocol": "http",
+                "auto_discovery": True
             }
         }
-        
+
         # Try to load configuration from file
         if os.path.exists(self.config_path):
             try:
@@ -163,7 +236,7 @@ class Config:
                     self._update_nested_dict(self.config_data, file_config)
             except Exception as e:
                 print(f"Error loading config from {self.config_path}: {e}")
-        
+
         # Load configuration from environment variables
         self._load_env_variables()
 
@@ -228,14 +301,14 @@ class Config:
             Configuration value
         """
         parts = key.split(".")
-        
+
         # Get value from config
         value = self.config_data
         for part in parts:
             if not isinstance(value, dict) or part not in value:
                 return default
             value = value[part]
-            
+
         return value
 
     def get_all(self) -> Dict[str, Any]:
@@ -260,17 +333,17 @@ class Config:
             self.config_data[key] = value
         else:
             section = parts[0]
-            param = ".".join(parts[1:])
-            
+            param_key = ".".join(parts[1:])
+
             if section not in self.config_data:
                 self.config_data[section] = {}
-                
+
             current = self.config_data[section]
             for part in parts[1:-1]:
                 if part not in current:
                     current[part] = {}
                 current = current[part]
-                
+
             current[parts[-1]] = value
 
     def save(self, path: Optional[str] = None) -> None:
@@ -278,7 +351,8 @@ class Config:
         Save configuration to file.
 
         Args:
-            path: Path to configuration file. If not specified, self.config_path is used.
+            path: Path to configuration file. If not specified,
+                  self.config_path is used.
         """
         save_path = path or self.config_path
         with open(save_path, 'w', encoding='utf-8') as f:
@@ -302,6 +376,215 @@ class Config:
                 d[k] = v
         return d
 
+    def enable_feature(self, feature: str) -> None:
+        """
+        Enable a specific feature in the configuration.
+
+        Args:
+            feature: Feature to enable (ssl, auth, roles, proxy_registration,
+                     security)
+        """
+        if feature == "ssl":
+            self.set("ssl.enabled", True)
+            self.set("security.ssl.enabled", True)
+        elif feature == "auth":
+            self.set("security.auth.enabled", True)
+        elif feature == "roles":
+            self.set("security.permissions.enabled", True)
+            self.set("roles.enabled", True)
+        elif feature == "proxy_registration":
+            self.set("proxy_registration.enabled", True)
+        elif feature == "security":
+            self.set("security.enabled", True)
+        elif feature == "rate_limit":
+            self.set("security.rate_limit.enabled", True)
+        elif feature == "certificates":
+            self.set("security.certificates.enabled", True)
+        else:
+            raise ValueError(f"Unknown feature: {feature}")
+
+    def disable_feature(self, feature: str) -> None:
+        """
+        Disable a specific feature in the configuration.
+
+        Args:
+            feature: Feature to disable (ssl, auth, roles, proxy_registration,
+                     security)
+        """
+        if feature == "ssl":
+            self.set("ssl.enabled", False)
+            self.set("security.ssl.enabled", False)
+        elif feature == "auth":
+            self.set("security.auth.enabled", False)
+        elif feature == "roles":
+            self.set("security.permissions.enabled", False)
+            self.set("roles.enabled", False)
+        elif feature == "proxy_registration":
+            self.set("proxy_registration.enabled", False)
+        elif feature == "security":
+            self.set("security.enabled", False)
+        elif feature == "rate_limit":
+            self.set("security.rate_limit.enabled", False)
+        elif feature == "certificates":
+            self.set("security.certificates.enabled", False)
+        else:
+            raise ValueError(f"Unknown feature: {feature}")
+
+    def is_feature_enabled(self, feature: str) -> bool:
+        """
+        Check if a specific feature is enabled.
+
+        Args:
+            feature: Feature to check (ssl, auth, roles, proxy_registration,
+                     security)
+
+        Returns:
+            True if feature is enabled, False otherwise
+        """
+        if feature == "ssl":
+            return (self.get("ssl.enabled", False) or
+                    self.get("security.ssl.enabled", False))
+        elif feature == "auth":
+            return self.get("security.auth.enabled", False)
+        elif feature == "roles":
+            return (self.get("security.permissions.enabled", False) or
+                    self.get("roles.enabled", False))
+        elif feature == "proxy_registration":
+            return self.get("proxy_registration.enabled", False)
+        elif feature == "security":
+            return self.get("security.enabled", False)
+        elif feature == "rate_limit":
+            return self.get("security.rate_limit.enabled", False)
+        elif feature == "certificates":
+            return self.get("security.certificates.enabled", False)
+        else:
+            raise ValueError(f"Unknown feature: {feature}")
+
+    def get_enabled_features(self) -> List[str]:
+        """
+        Get list of all enabled features.
+
+        Returns:
+            List of enabled feature names
+        """
+        features = []
+        if self.is_feature_enabled("ssl"):
+            features.append("ssl")
+        if self.is_feature_enabled("auth"):
+            features.append("auth")
+        if self.is_feature_enabled("roles"):
+            features.append("roles")
+        if self.is_feature_enabled("proxy_registration"):
+            features.append("proxy_registration")
+        if self.is_feature_enabled("security"):
+            features.append("security")
+        if self.is_feature_enabled("rate_limit"):
+            features.append("rate_limit")
+        if self.is_feature_enabled("certificates"):
+            features.append("certificates")
+        return features
+
+    def configure_auth_mode(self, mode: str, **kwargs) -> None:
+        """
+        Configure authentication mode.
+
+        Args:
+            mode: Authentication mode (api_key, jwt, certificate, basic, oauth2)
+            **kwargs: Additional configuration parameters
+        """
+        if mode == "api_key":
+            self.set("security.auth.methods", ["api_key"])
+            if "api_keys" in kwargs:
+                self.set("security.auth.api_keys", kwargs["api_keys"])
+        elif mode == "jwt":
+            self.set("security.auth.methods", ["jwt"])
+            if "jwt_secret" in kwargs:
+                self.set("security.auth.jwt_secret", kwargs["jwt_secret"])
+        elif mode == "certificate":
+            self.set("security.auth.methods", ["certificate"])
+            self.set("security.auth.certificate_auth", True)
+        elif mode == "basic":
+            self.set("security.auth.methods", ["basic"])
+            self.set("security.auth.basic_auth", True)
+        elif mode == "oauth2":
+            self.set("security.auth.methods", ["oauth2"])
+            if "oauth2_config" in kwargs:
+                self.set("security.auth.oauth2_config", kwargs["oauth2_config"])
+        else:
+            raise ValueError(f"Unknown authentication mode: {mode}")
+
+    def configure_proxy_registration_mode(self, mode: str, **kwargs) -> None:
+        """
+        Configure proxy registration mode.
+
+        Args:
+            mode: Registration mode (token, certificate, api_key, none)
+            **kwargs: Additional configuration parameters
+        """
+        if mode == "none":
+            self.set("proxy_registration.enabled", False)
+        else:
+            self.set("proxy_registration.enabled", True)
+
+            if mode == "token":
+                self.set("proxy_registration.auth_method", "token")
+                if "token" in kwargs:
+                    self.set("proxy_registration.token.token", kwargs["token"])
+            elif mode == "certificate":
+                self.set("proxy_registration.auth_method", "certificate")
+                if "cert_file" in kwargs:
+                    self.set("proxy_registration.certificate.cert_file",
+                             kwargs["cert_file"])
+                if "key_file" in kwargs:
+                    self.set("proxy_registration.certificate.key_file",
+                             kwargs["key_file"])
+            elif mode == "api_key":
+                self.set("proxy_registration.auth_method", "api_key")
+                if "key" in kwargs:
+                    self.set("proxy_registration.api_key.key", kwargs["key"])
+
+    def create_minimal_config(self) -> Dict[str, Any]:
+        """
+        Create minimal configuration with only essential features.
+
+        Returns:
+            Minimal configuration dictionary
+        """
+        minimal_config = self.config_data.copy()
+
+        # Disable all optional features
+        minimal_config["ssl"]["enabled"] = False
+        minimal_config["security"]["enabled"] = False
+        minimal_config["security"]["auth"]["enabled"] = False
+        minimal_config["security"]["permissions"]["enabled"] = False
+        minimal_config["security"]["rate_limit"]["enabled"] = False
+        minimal_config["security"]["certificates"]["enabled"] = False
+        minimal_config["proxy_registration"]["enabled"] = False
+        minimal_config["roles"]["enabled"] = False
+
+        return minimal_config
+
+    def create_secure_config(self) -> Dict[str, Any]:
+        """
+        Create secure configuration with all security features enabled.
+
+        Returns:
+            Secure configuration dictionary
+        """
+        secure_config = self.config_data.copy()
+
+        # Enable all security features
+        secure_config["ssl"]["enabled"] = True
+        secure_config["security"]["enabled"] = True
+        secure_config["security"]["auth"]["enabled"] = True
+        secure_config["security"]["permissions"]["enabled"] = True
+        secure_config["security"]["rate_limit"]["enabled"] = True
+        secure_config["security"]["certificates"]["enabled"] = True
+        secure_config["proxy_registration"]["enabled"] = True
+        secure_config["roles"]["enabled"] = True
+
+        return secure_config
+
 
 # Singleton instance
 config = Config()