🔒 CIMD URL Not Registered

\n Error: The CIMD URL ${clientId} is not registered with this authorization server.\n

\n To use this CIMD URL with OAuth authentication, you must first register it.\n

\n Register This URL\n \n \n `, 403);\n }\n }\n\n return next();\n});\n\n// OAuth metadata endpoint\napp.get(\"/.well-known/oauth-authorization-server\", (c) => {\n const baseUrl = new URL(c.req.url).origin;\n\n return c.json({\n issuer: baseUrl,\n authorization_endpoint: `${baseUrl}/authorize`,\n token_endpoint: `${baseUrl}/token`,\n grant_types_supported: [\"authorization_code\", \"refresh_token\"],\n response_types_supported: [\"code\"],\n token_endpoint_auth_methods_supported: [\"client_secret_basic\", \"client_secret_post\"],\n client_id_metadata_document_supported: true,\n code_challenge_methods_supported: [\"S256\"],\n });\n});\n\n// Authorization endpoint - Fetch metadata and show consent (no login screen since we have preregistration)\napp.get(\"/authorize\", async (c) => {\n const clientId = c.req.query(\"client_id\");\n const redirectUri = c.req.query(\"redirect_uri\");\n const state = c.req.query(\"state\");\n const codeChallenge = c.req.query(\"code_challenge\");\n const codeChallengeMethod = c.req.query(\"code_challenge_method\");\n\n if (!clientId || !redirectUri) {\n return c.html(`\n \n \n \n Authorization Error\n \n \n \n

Authorization Error

Missing required parameters: client_id and redirect_uri are required.

\n \n \n `, 400);\n }\n\n // Fetch client metadata (handles both localhost and regular CIMD)\n const result = await fetchClientMetadata(clientId, redirectUri);\n const clientMetadata = result.metadata;\n const metadataError = result.error;\n const isLocalhost = result.isLocalhost;\n\n // If there was a metadata error, show error page\n if (metadataError) {\n return c.html(`\n \n \n \n Authorization Error\n \n \n \n

❌ Authorization Error

\n Error: ${metadataError}\n

\n Client ID (CIMD URL):
\n ${clientId}\n

\n \n \n \n \n `, 400);\n }\n\n // Show consent screen with metadata\n const clientName = clientMetadata?.client_name || 'Unknown Application';\n const clientUri = clientMetadata?.client_uri;\n const logoUri = clientMetadata?.logo_uri;\n const redirectUris = clientMetadata?.redirect_uris || [];\n\n return c.html(`\n \n \n \n Authorization Request\n \n \n \n

🔐 Authorization Request

\n\n ${isLocalhost ? `\n

\n ⚠️ Unverified Development Client
\n This is a localhost development client. The client identity cannot be verified.\n Only authorize if you trust the application running on your local machine.\n

\n ` : `\n

\n ✅ Client metadata successfully retrieved and validated\n

\n `}\n\n ${logoUri ? `

$\"Client$

` : ''}\n\n

Application Details:

Name: ${clientName}

\n ${clientUri ? `

Website: ${clientUri}

` : ''}\n

Client ID: ${clientId}

\n ${redirectUris.length > 0 ? `\n

\n Registered redirect URIs:\n

${uri}

\n ` : ''}\n

Redirect URI for this request: ${redirectUri}

\n\n

\n Permissions requested:\n

Access to your MCP resources
Ability to make requests on your behalf

\n\n \n \n\n \n \n \n `);\n});\n\n// Token endpoint\napp.post(\"/token\", async (c) => {\n const body = await c.req.parseBody();\n const grantType = body.grant_type;\n\n if (grantType === \"authorization_code\") {\n return c.json({\n // access_token: \"test_access_token_\" + Math.random().toString(36).substring(7),\n access_token: \"test_access_token_abc\",\n refresh_token: \"test_refresh_token_\" + Math.random().toString(36).substring(7),\n token_type: \"Bearer\",\n expires_in: 3600,\n });\n } else if (grantType === \"refresh_token\") {\n return c.json({\n access_token: \"test_access_token_\" + Math.random().toString(36).substring(7),\n refresh_token: body.refresh_token,\n token_type: \"Bearer\",\n expires_in: 3600,\n });\n }\n\n return c.json({ error: \"unsupported_grant_type\" }, 400);\n});\n\n// Registration form page\napp.get(\"/register-form\", async (c) => {\n const clientId = c.req.query(\"client_id\") || \"\";\n const currentCount = await getRegisteredUrlCount();\n const isAtLimit = currentCount >= MAX_REGISTERED_URLS;\n\n return c.html(`\n \n \n \n Register CIMD URL\n \n \n \n

Register CIMD URL

\n Register your CIMD URL to enable OAuth authentication with this authorization server.\n

Registered URLs: ${currentCount} / ${MAX_REGISTERED_URLS}

\n\n ${isAtLimit ? `\n

\n Limit Reached: The maximum of ${MAX_REGISTERED_URLS} registered URLs has been reached.\n You must unregister a URL before registering a new one.\n

\n ` : `\n \n `}\n\n

View/unregister URLs | ← Back to home

\n \n \n `);\n});\n\n// Registration endpoint (POST)\napp.post(\"/register\", async (c) => {\n const body = await c.req.parseBody();\n const url = body.url as string;\n\n if (!url) {\n return c.json({ error: \"URL is required\" }, 400);\n }\n\n // Validate URL format\n try {\n new URL(url);\n } catch {\n return c.json({ error: \"Invalid URL format\" }, 400);\n }\n\n const result = await registerUrl(url);\n\n if (!result.success) {\n const currentCount = await getRegisteredUrlCount();\n return c.html(`\n \n \n \n Registration Limit Reached\n \n \n \n

❌ Registration Limit Reached

\n Error: Cannot register ${url}. The maximum limit of ${MAX_REGISTERED_URLS} registered URLs has been reached.\n

\n Current registered URLs: ${currentCount} / ${MAX_REGISTERED_URLS}\n

\n To register a new URL, you must first unregister an existing URL.\n

Unregister a URL | ← Back to home

\n \n \n `, 403);\n }\n\n return c.html(`\n \n \n \n Registration Successful\n \n \n \n

✅ Registration Successful

\n The CIMD URL ${url} has been successfully registered!\n

You can now use this URL as a client_id for OAuth authentication.

← Back to home

\n \n \n `);\n});\n\n// Delete/unregister a URL\nasync function unregisterUrl(url: string): Promise {\n const result = await sqlite.execute({\n sql: \"DELETE FROM registered_urls WHERE url = ?\",\n args: [url],\n });\n return result.rowsAffected > 0;\n}\n\n// List all registered URLs\nasync function listRegisteredUrls(): Promise {\n const result = await sqlite.execute(\"SELECT url FROM registered_urls ORDER BY registered_at DESC\");\n return result.rows.map(row => row[0] as string);\n}\n\n// Unregister form page\napp.get(\"/unregister-form\", async (c) => {\n const registeredUrls = await listRegisteredUrls();\n\n return c.html(`\n \n \n \n Unregister CIMD URL\n \n \n \n

Unregister CIMD URL

\n Remove a CIMD URL from the registered list. This will prevent it from being used for OAuth authentication.\n

\n\n ${registeredUrls.length > 0 ? `\n

\n Currently Registered URLs (${registeredUrls.length}):\n ${registeredUrls.map(url => `

• ${url}

`).join('')}\n

\n\n \n ` : `\n

\n No registered URLs found. There are currently no URLs registered in the system.\n

\n `}\n\n

← Back to home

\n \n \n `);\n});\n\n// Unregister endpoint (POST)\napp.post(\"/unregister\", async (c) => {\n const body = await c.req.parseBody();\n const url = (body.manual_url as string) || (body.url as string);\n\n if (!url) {\n return c.json({ error: \"URL is required\" }, 400);\n }\n\n const removed = await unregisterUrl(url);\n\n if (!removed) {\n return c.html(`\n \n \n \n URL Not Found\n \n \n \n

⚠️ URL Not Found

\n The URL ${url} was not found in the registered URLs list.\n

← Try again | Home

\n \n \n `);\n }\n\n return c.html(`\n \n \n \n Unregistration Successful\n \n \n \n

✅ Unregistration Successful

\n The CIMD URL ${url} has been successfully unregistered and removed from the system.\n

This URL can no longer be used for OAuth authentication until it is re-registered.

Unregister another | ← Back to home

\n \n \n `);\n});\n\n// Health check\napp.get(\"/health\", (c) => c.json({ status: \"ok\" }));\n\n// Home page\napp.get(\"/\", (c) => {\n const baseUrl = new URL(c.req.url).origin;\n\n return c.html(`\n \n \n \n CIMD Demo Auth Server (with Registration)\n \n \n \n

Authorization Server (with CIMD Registration)

CIMD Demo Auth Server 2

This authorization server requires CIMD URLs to be pre-registered before use.

\n\n

Available Endpoints

GET /health

GET /.well-known/oauth-authorization-server

GET /authorize

POST /token

GET /register-form - Register a new CIMD URL

POST /register - Register a new CIMD URL

GET /unregister-form - Unregister a CIMD URL

POST /unregister - Unregister a CIMD URL

\n\n

\n Note: This authorization server requires client_id (CIMD URL) to be registered\n before it can be used. Unregistered URLs will receive an error page with a link to register.\n

\n \n \n `);\n});\n\nexport default app.fetch;\n","deleted","label",[99],"permalink","https://www.val.town/x/pcarleton/mcp-cimd-demo-as2/code/http.ts","extension","actionData","errors"]