Authorization Error

Missing required parameters: client_id and redirect_uri are required.

\n \n \n `, 400);\n }\n\n // Show login screen - user must login before we fetch metadata\n return c.html(`\n \n \n \n Login Required\n \n \n \n

🔐 Login Required

\n\n

\n An application is requesting access to your account.\n

\n\n

\n Application requesting access:
\n ${clientId}\n

\n\n \n\n \n \n \n `);\n});\n\n// Authorization login endpoint - Step 2: After login, fetch metadata and show consent\napp.post(\"/authorize-login\", async (c) => {\n const body = await c.req.parseBody();\n const clientId = body.client_id as string;\n const redirectUri = body.redirect_uri as string;\n const state = body.state as string | undefined;\n const codeChallenge = body.code_challenge as string | undefined;\n const codeChallengeMethod = body.code_challenge_method as string | undefined;\n\n // Fetch client metadata (handles both localhost and regular CIMD)\n const result = await fetchClientMetadata(clientId, redirectUri);\n const clientMetadata = result.metadata;\n const metadataError = result.error;\n const isLocalhost = result.isLocalhost;\n\n // If there was a metadata error, show error page\n if (metadataError) {\n return c.html(`\n \n \n \n Authorization Error\n \n \n \n

❌ Authorization Error

\n Error: ${metadataError}\n

\n Client ID (CIMD URL):
\n ${clientId}\n

\n \n \n \n \n `, 400);\n }\n\n // Show consent screen with metadata\n const clientName = clientMetadata?.client_name || 'Unknown Application';\n const clientUri = clientMetadata?.client_uri;\n const logoUri = clientMetadata?.logo_uri;\n const redirectUris = clientMetadata?.redirect_uris || [];\n\n return c.html(`\n \n \n \n Authorization Request\n \n \n \n

🔐 Authorization Request

\n\n ${isLocalhost ? `\n

\n ⚠️ Unverified Development Client
\n This is a localhost development client. The client identity cannot be verified.\n Only authorize if you trust the application running on your local machine.\n

\n ` : `\n

\n ✅ Client metadata successfully retrieved and validated\n

\n `}\n\n ${logoUri ? `

$\"Client$

` : ''}\n\n

Application Details:

Name: ${clientName}

\n ${clientUri ? `

Website: ${clientUri}

` : ''}\n

Client ID: ${clientId}

\n ${redirectUris.length > 0 ? `\n

\n Registered redirect URIs:\n

${uri}

\n ` : ''}\n

Redirect URI for this request: ${redirectUri}

\n\n

\n Permissions requested:\n

Access to your MCP resources
Ability to make requests on your behalf

\n\n \n \n\n \n \n \n `);\n});\n\n// Token endpoint\napp.post(\"/token\", async (c) => {\n const body = await c.req.parseBody();\n const grantType = body.grant_type;\n\n if (grantType === \"authorization_code\") {\n return c.json({\n access_token: \"test_access_token_abc\",\n refresh_token: \"test_refresh_token_xyz\",\n token_type: \"Bearer\",\n expires_in: 3600,\n });\n } else if (grantType === \"refresh_token\") {\n return c.json({\n access_token: \"test_access_token_abc\",\n refresh_token: body.refresh_token,\n token_type: \"Bearer\",\n expires_in: 3600,\n });\n }\n\n return c.json({ error: \"unsupported_grant_type\" }, 400);\n});\n\n// Health check\napp.get(\"/health\", (c) => c.json({ status: \"ok\" }));\n\n// Home page\napp.get(\"/\", (c) => {\n const baseUrl = new URL(c.req.url).origin;\n\n return c.html(`\n \n \n \n CIMD Demo Auth Server (Open)\n \n \n \n

Authorization Server (CIMD Open)

CIMD Demo Auth Server

This authorization server supports Client ID Metadata Documents (CIMD) without requiring pre-registration.

\n\n

Available Endpoints

GET /health

GET /.well-known/oauth-authorization-server

GET /authorize

POST /token

\n\n

\n Note: This authorization server uses CIMD (Client ID Metadata Documents).\n Any HTTPS URL can be used as a client_id, and the server will fetch the metadata document\n from that URL during the authorization flow.\n

\n \n \n `);\n});\n\nexport default app.fetch;\n\n// For local development\nif (import.meta.main) {\n const port = 3001;\n console.log(`Starting auth server on port ${port}...`);\n Deno.serve({ port }, app.fetch);\n}\n","deleted","label",[99],"permalink","https://www.val.town/x/pcarleton/mcp-cimd-demo-as/code/http.ts","extension","actionData","errors"]