This AS doesn't do `/authorize`

${esc(asUrl)} is an XAA (cross-app access) authorization server. It only supports\ngrant_type=urn:ietf:params:oauth:grant-type:jwt-bearer at\n/token — there's no interactive authorization-code flow.

The authorization_endpoint in our metadata exists only because some client schemas\nrequire the field. If your client redirected you here, it's trying to run a code flow against an\nAS that can't issue codes — check that it's using the jwt-bearer grant.

Request parameters received

\n${rows ? `${rows}

` : `

(none)

`}\n`;\n}\n\nexport function indexPage(opts: {\n role: \"IdP\" | \"AS\" | \"RS\";\n name: string;\n endpoints: { method: string; path: string; note?: string }[];\n}): string {\n const colors = {\n IdP: { bg: \"#fef3c7\", accent: \"#f59e0b\" },\n AS: { bg: \"#dbeafe\", accent: \"#3b82f6\" },\n RS: { bg: \"#d1fae5\", accent: \"#10b981\" },\n }[opts.role];\n\n const rows = opts.endpoints\n .map((e) => {\n const label = `${e.method} ${e.path}`;\n const link = e.method === \"GET\" ? `${label}` : label;\n return `

${link}${e.note ? ` — ${e.note}` : \"\"}

`;\n })\n .join(\"\\n\");\n\n return `\n${opts.name}

${opts.role}

${opts.name}

\n${rows}\n

`;\n}\n",[19,90],"2254ac5a-5b16-11f1-b16b-ee650bb23af1","config.ts","019e0434-9c34-729f-86c9-02204c03f726",2,["D",1780028604779],"/**\n * Wiring for the XAA demo stack. Client creds are NOT hardcoded — they\n * come from /register (see register.ts). The IdP and AS issue distinct\n * client_ids because each bakes its own issuer into the HMAC input.\n */\n\nexport const OKTA_ISSUER = \"https://integrator-7089468.okta.com\";\n\nexport const DEMO_USER = {\n sub: \"demo@example.com\",\n email: \"demo@example.com\",\n name: \"Demo User\",\n};\n\n// \"Am I on val.town?\" — esm.town serves deployed code\nexport const ON_VALTOWN = import.meta.url.startsWith(\"https://esm.town\");\n\nexport const URLS = ON_VALTOWN\n ? {\n idp: \"https://xaa-mcp-idp.val.run\",\n as: \"https://xaa-mcp-as.val.run\",\n rs: \"https://xaa-mcp-rs.val.run\",\n cal: \"https://xaa-mcp-cal.val.run\",\n as2: \"https://xaa-mcp-as2-jlu.val.run\",\n rs2: \"https://xaa-mcp-rs2-jlu.val.run\",\n }\n : {\n idp: \"http://localhost:3001\",\n as: \"http://localhost:3002\",\n rs: \"http://localhost:3000\",\n cal: \"http://localhost:3003\",\n as2: \"http://localhost:3005\",\n rs2: \"http://localhost:3004\",\n };\n",[19,96],"5a999e3e-4a56-11f1-8b70-ee650bb23af1","directory",["D",1778187017209],[19],{"_36":102,"_13":19,"_65":68,"_67":-5,"_69":70,"_71":72,"_73":74,"_38":119,"_17":34,"_76":103,"_78":-5,"_80":51,"_81":-5,"_116":120,"_18":121},{"_36":108,"_13":109,"_65":110,"_67":-5,"_69":70,"_71":111,"_73":74,"_38":112,"_17":44,"_76":113,"_78":114,"_80":51,"_81":115,"_116":117,"_18":118},"9fc81bad-c526-4b11-986c-25e874d3e9e5","http.ts","019e0434-9c35-77e8-8c2b-03cdfe3f2c7b",22,["D",1789426951132],"http","import { Hono } from \"npm:hono@3\";\nimport { cors } from \"npm:hono@3/cors\";\nimport * as jose from \"npm:jose@5\";\nimport { URLS, DEMO_USER } from \"./shared/config.ts\";\nimport { getOrCreateKeypair } from \"./shared/keys.ts\";\nimport { indexPage, xaaAuthorizeStub } from \"./shared/html.ts\";\nimport { deriveAs2Secret, debugCredsAs2 } from \"./shared/register.ts\";\n\nconst JWT_BEARER_GRANT = \"urn:ietf:params:oauth:grant-type:jwt-bearer\";\nconst ID_JAG_TYP = \"oauth-id-jag+jwt\";\n\n// Advertised in AS metadata (and mirrored in RS2's PRM). Fake-gmail themed —\n// breadth here is for RBAC×EMA scope-narrowing tests, not real enforcement.\nconst SCOPES_SUPPORTED = [\n \"gmail.read\",\n \"gmail.send\",\n \"gmail.modify\",\n \"gmail.compose\",\n \"gmail.labels\",\n \"gmail.metadata\",\n \"gmail.settings.basic\",\n \"gmail.settings.sharing\",\n \"contacts.read\",\n \"profile\",\n];\n\n// Static test credentials — demo val, fake data only. Accepted at /token\n// independent of the (iss, client_id, resource) HMAC tuple, so iterating\n// across issuers/tenants doesn't require re-deriving the secret each time.\nconst STATIC_TEST_CLIENT = { client_id: \"claude-ema-okta-test\", client_secret: \"as2_static_b4e7f20c9a51d836\" };\n\n// Claude-as-IdP: claude.ai mints its own JAGs (no upstream IdP). There's no\n// OIDC discovery at claude.ai yet, so we take the public key inline via env.\n// Set CLAUDE_AI_JWK to the JSON public JWK (the one matching\n// TOOLBOX_XAA_SIGNING_PRIVATE_KEY, with the same `kid`).\nconst CLAUDE_AI_ISS = \"https://claude.ai\";\nconst CLAUDE_AI_JWK = Deno.env.get(\"CLAUDE_AI_JWK\");\nif (CLAUDE_AI_JWK) {\n // DEBUG: surface what jose will actually see for the claude.ai key.\n // Env var must be a SINGLE JWK (we wrap it in {keys:[...]} at jwksFor).\n try {\n const parsed = JSON.parse(CLAUDE_AI_JWK);\n const k = Array.isArray(parsed.keys) ? parsed.keys[0] : parsed;\n console.log(\"[as2] CLAUDE_AI_JWK parsed:\", {\n kty: k?.kty, crv: k?.crv, alg: k?.alg, kid: k?.kid,\n envVarShape: Array.isArray(parsed.keys) ? \"jwks\" : \"single-jwk\",\n });\n } catch (e) {\n console.error(\"[as2] CLAUDE_AI_JWK is not valid JSON:\", e);\n }\n}\n\nconst kp = await getOrCreateKeypair(\"xaa_as2_signing_key_v1\");\n\n// JWKS resolver per issuer. For claude.ai we use the inline JWK; for\n// everything else we discover via OIDC (demo IdP, Okta, etc).\ntype KeyResolver = ReturnType | ReturnType;\nconst jwksCache = new Map();\nasync function jwksFor(issuer: string): Promise {\n let jwks = jwksCache.get(issuer);\n if (jwks) return jwks;\n if (issuer === CLAUDE_AI_ISS) {\n // Merge the inline env-var key (dev keypair) with the published toolbox\n // JWKS so JAGs from either signer verify.\n const keys: jose.JWK[] = [];\n if (CLAUDE_AI_JWK) {\n const parsed = JSON.parse(CLAUDE_AI_JWK);\n keys.push(...(Array.isArray(parsed.keys) ? parsed.keys : [parsed]));\n }\n for (const url of [\n \"https://claude.ai/v1/mcp/jwks\",\n \"https://claude-ai.staging.ant.dev/v1/mcp/jwks\",\n ]) {\n try {\n const remote = await fetch(url).then((r) => r.json());\n if (Array.isArray(remote.keys)) keys.push(...remote.keys);\n } catch (e) {\n console.error(`[as2] failed to fetch ${url}:`, e);\n }\n }\n console.log(\"[as2] claude.ai key set:\", keys.map((k) => ({ kid: k.kid, kty: k.kty, alg: k.alg })));\n jwks = jose.createLocalJWKSet({ keys });\n } else {\n const res = await fetch(`${issuer}/.well-known/openid-configuration`);\n if (!res.ok) throw new Error(`OIDC discovery failed for ${issuer}: HTTP ${res.status}`);\n const { jwks_uri } = await res.json();\n if (!jwks_uri) throw new Error(`${issuer} OIDC config missing jwks_uri`);\n jwks = jose.createRemoteJWKSet(new URL(jwks_uri));\n }\n jwksCache.set(issuer, jwks);\n return jwks;\n}\n\nconst app = new Hono();\napp.use(\"*\", cors({\n origin: \"*\",\n allowMethods: [\"GET\", \"POST\", \"OPTIONS\"],\n allowHeaders: [\"Content-Type\", \"Authorization\", \"mcp-protocol-version\"],\n}));\n\n// ─── Debug: request-URL tracer ──────────────────────────────────────────────\n// Ring-buffers the exact request URL (incl. query string) for discovery/auth\n// hits, so we can tell whether a client munges URLs at fetch time or only in\n// its display layer. No request bodies and no Authorization headers — only\n// method, URL, and User-Agent.\nconst REQLOG_BLOB_KEY = \"debug_request_log\";\nconst REQLOG_MAX = 50;\n\napp.use(\"*\", async (c, next) => {\n const path = new URL(c.req.url).pathname;\n // includes(): also catches path-prefix constructions like //.well-known/...\n if (path.includes(\"/.well-known/\") || path === \"/token\" || path === \"/authorize\") {\n try {\n const { blob } = await import(\"https://esm.town/v/std/blob\");\n const log = ((await blob.getJSON(REQLOG_BLOB_KEY)) as unknown[] | undefined) ?? [];\n log.push({\n ts: new Date().toISOString(),\n method: c.req.method,\n url: c.req.url,\n user_agent: c.req.header(\"User-Agent\") ?? null,\n });\n await blob.setJSON(REQLOG_BLOB_KEY, log.slice(-REQLOG_MAX));\n } catch (e) {\n console.error(\"[as2] reqlog failed:\", e); // never block the real request\n }\n }\n await next();\n});\n\napp.get(\"/debug/requests\", async (c) => {\n const { blob } = await import(\"https://esm.town/v/std/blob\");\n return c.json(((await blob.getJSON(REQLOG_BLOB_KEY)) as unknown[] | undefined) ?? []);\n});\n\n// ─── Metadata + JWKS ────────────────────────────────────────────────────────\n\napp.get(\"/.well-known/oauth-authorization-server\", (c) => {\n // Tenant-tagged discovery probe: when the AS URL a client discovered carried\n // ?tenant=, echo it (extra metadata fields are spec-legal) and tag the\n // authorize/token endpoints so munging on any later hop is observable too.\n // Without the param the response is byte-identical to the untagged form.\n const tenant = c.req.query(\"tenant\");\n const tq = tenant ? `?tenant=${encodeURIComponent(tenant)}` : \"\";\n return c.json({\n issuer: URLS.as2,\n token_endpoint: `${URLS.as2}/token${tq}`,\n authorization_endpoint: `${URLS.as2}/authorize${tq}`,\n registration_endpoint: `${URLS.as2}/register`,\n response_types_supported: [\"code\"],\n grant_types_supported: [JWT_BEARER_GRANT, \"authorization_code\"],\n scopes_supported: SCOPES_SUPPORTED,\n code_challenge_methods_supported: [\"S256\"],\n // \"none\" → CIMD clients are public; PKCE is their proof of possession\n token_endpoint_auth_methods_supported: [\"client_secret_basic\", \"client_secret_post\", \"none\"],\n client_id_metadata_document_supported: true,\n ...(tenant ? { tenant } : {}),\n });\n});\n\n// Path-scoped (Atlassian-style tenanted) AS metadata. Served at every\n// well-known construction a client might derive from an AS URL of the form\n// / — RFC 8414 path-suffix, path-prefix, and the\n// openid-configuration analogues — so the tracer shows which one is fetched.\n// issuer is path-scoped (realistic; exercises client aud derivation), but the\n// authorize/token endpoints stay the working base URLs.\nconst pathTenantMetadata = (tenant: string) => ({\n issuer: `${URLS.as2}/${tenant}`,\n token_endpoint: `${URLS.as2}/token`,\n authorization_endpoint: `${URLS.as2}/authorize`,\n registration_endpoint: `${URLS.as2}/register`,\n response_types_supported: [\"code\"],\n grant_types_supported: [JWT_BEARER_GRANT, \"authorization_code\"],\n scopes_supported: SCOPES_SUPPORTED,\n code_challenge_methods_supported: [\"S256\"],\n token_endpoint_auth_methods_supported: [\"client_secret_basic\", \"client_secret_post\", \"none\"],\n client_id_metadata_document_supported: true,\n tenant,\n});\nfor (const route of [\n \"/.well-known/oauth-authorization-server/:tenant\",\n \"/:tenant/.well-known/oauth-authorization-server\",\n \"/.well-known/openid-configuration/:tenant\",\n \"/:tenant/.well-known/openid-configuration\",\n]) {\n app.get(route, (c) => c.json(pathTenantMetadata(c.req.param(\"tenant\"))));\n}\n\napp.get(\"/.well-known/jwks.json\", (c) => c.json({ keys: [kp.publicJwk] }));\n\n// ─── CIMD — draft-ietf-oauth-client-id-metadata-document ───────────────────\n// A client_id that is an https URL is dereferenced; the RFC 7591 metadata\n// document it serves IS the registration — no /register round-trip. Cached\n// briefly so one authorize→token exchange doesn't refetch it.\n\ninterface ClientMetadata {\n client_id?: string;\n client_name?: string;\n redirect_uris?: string[];\n token_endpoint_auth_method?: string;\n [k: string]: unknown;\n}\n\nconst cimdCache = new Map();\nconst CIMD_TTL_MS = 5 * 60 * 1000;\n\nfunction isLoopbackHost(hostname: string): boolean {\n return hostname === \"localhost\" || hostname === \"127.0.0.1\" || hostname === \"[::1]\";\n}\n\nfunction isCimdClientId(clientId: string): boolean {\n try {\n const u = new URL(clientId);\n if (u.hash || u.username) return false;\n if (u.protocol === \"https:\") return !!u.hostname;\n // Local-dev clients publish their metadata on a loopback origin (e.g.\n // http://localhost:4000/...). Accept the URL as an identifier; fetchCimd\n // knows it can't be dereferenced from here.\n return u.protocol === \"http:\" && isLoopbackHost(u.hostname);\n } catch {\n return false;\n }\n}\n\n// SSRF guard for CIMD dereferences: https only, no loopback/private/link-local\n// hosts, no redirects, 5s cap. Proportionate for a sandboxed demo val — no\n// DNS-resolution pinning.\nfunction assertFetchableCimdUrl(u: URL): void {\n if (u.protocol !== \"https:\") throw new Error(\"client_id must be an https URL to dereference\");\n const host = u.hostname.replace(/^\\[|\\]$/g, \"\").toLowerCase();\n if (host === \"localhost\") throw new Error(\"refusing to dereference a loopback host\");\n const privateHost = /^(127\\.|10\\.|172\\.(1[6-9]|2\\d|3[01])\\.|192\\.168\\.|169\\.254\\.|0\\.|::1$|f[cd][0-9a-f]{2}:|fe80:)/i;\n if (privateHost.test(host)) throw new Error(\"refusing to dereference a private/loopback/link-local address\");\n}\n\n// Client metadata URLs that sit behind an SSO wall (Cloudflare Access 302s any\n// unauthenticated fetch to a login page), so they can't be dereferenced from\n// here. Pinned to the document the origin would serve; exact client_id match\n// only, so the no-redirects guard still applies to every other client.\nconst PINNED_CIMD_CLIENTS: Record = {\n \"https://claude-ai.staging.ant.dev/oauth/mcp-oauth-client-metadata\": {\n client_id: \"https://claude-ai.staging.ant.dev/oauth/mcp-oauth-client-metadata\",\n client_name: \"Claude (staging, pinned — not dereferenced)\",\n redirect_uris: [\"https://claude-ai.staging.ant.dev/api/mcp/auth_callback\"],\n token_endpoint_auth_method: \"none\",\n },\n};\n\nasync function fetchCimd(clientId: string): Promise {\n const cached = cimdCache.get(clientId);\n if (cached && Date.now() - cached.fetchedAt < CIMD_TTL_MS) return cached.doc;\n const pinned = PINNED_CIMD_CLIENTS[clientId];\n if (pinned) {\n cimdCache.set(clientId, { doc: pinned, fetchedAt: Date.now() });\n console.log(\"[as2] CIMD pinned client accepted without fetch:\", clientId);\n return pinned;\n }\n const u = new URL(clientId);\n if (u.protocol === \"http:\" && isLoopbackHost(u.hostname)) {\n // Only reachable on the developer's machine — accept the identifier\n // without dereferencing. /authorize limits such clients to loopback redirects.\n const doc: ClientMetadata = { client_id: clientId, client_name: `local-dev client (${u.host}, not dereferenced)` };\n cimdCache.set(clientId, { doc, fetchedAt: Date.now() });\n console.log(\"[as2] CIMD loopback client accepted without fetch:\", clientId);\n return doc;\n }\n assertFetchableCimdUrl(u);\n const res = await fetch(clientId, {\n headers: { Accept: \"application/json\" },\n redirect: \"error\",\n signal: AbortSignal.timeout(5000),\n });\n if (!res.ok) throw new Error(`HTTP ${res.status} fetching client metadata document`);\n const doc = await res.json() as ClientMetadata;\n // Spec: a client_id member in the document must equal the URL it was fetched from.\n if (doc.client_id && doc.client_id !== clientId) {\n throw new Error(`document client_id (${doc.client_id}) != client_id URL`);\n }\n if (!Array.isArray(doc.redirect_uris) || doc.redirect_uris.length === 0) {\n throw new Error(\"client metadata document has no redirect_uris\");\n }\n cimdCache.set(clientId, { doc, fetchedAt: Date.now() });\n console.log(\"[as2] CIMD fetched:\", { client_id: clientId, client_name: doc.client_name, redirect_uris: doc.redirect_uris });\n return doc;\n}\n\nfunction b64url(buf: ArrayBuffer): string {\n return btoa(String.fromCharCode(...new Uint8Array(buf))).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\n// A dereferenceable sample client document, so the CIMD flow can be exercised\n// with curl — real clients bring their own metadata URL.\nconst DEMO_CLIENT_PATH = \"/demo-client-metadata.json\";\napp.get(DEMO_CLIENT_PATH, (c) =>\n c.json({\n client_id: `${URLS.as2}${DEMO_CLIENT_PATH}`,\n client_name: \"XAA demo CIMD client\",\n redirect_uris: [\"http://localhost:8976/callback\", \"https://example.com/callback\"],\n token_endpoint_auth_method: \"none\",\n grant_types: [\"authorization_code\"],\n response_types: [\"code\"],\n }));\n\n// ─── /authorize — authorization_code + PKCE ─────────────────────────────────\n// GET renders a consent page (no user store — a fixed demo identity approves);\n// POST mints the code. The code is a short-lived self-contained JWT signed\n// with the AS key, so nothing has to be persisted between /authorize and\n// /token. CIMD client_ids (https URL) validate redirect_uri against their\n// metadata document; opaque client_ids (stateless DCR — nothing stored to\n// match against) just need an https or loopback redirect_uri.\n\nconst PERSONAL_USER = { sub: \"demo-user\", email: \"jlu@anthropic.com\" };\n\nasync function checkAuthorizeRequest(\n q: Record,\n): Promise<{ ok: true } | { ok: false; error: string; description: string }> {\n if (q.response_type && q.response_type !== \"code\") {\n return { ok: false, error: \"unsupported_response_type\", description: String(q.response_type) };\n }\n if (q.code_challenge_method && q.code_challenge_method !== \"S256\") {\n return { ok: false, error: \"invalid_request\", description: \"only S256 code_challenge_method is supported\" };\n }\n if (isCimdClientId(q.client_id!)) {\n let meta: ClientMetadata;\n try {\n meta = await fetchCimd(q.client_id!);\n } catch (e) {\n return { ok: false, error: \"invalid_client\", description: `client metadata document fetch failed: ${e instanceof Error ? e.message : e}` };\n }\n const registeredRedirects = meta.redirect_uris ?? [];\n let redirectOk = registeredRedirects.includes(q.redirect_uri!);\n if (!redirectOk && registeredRedirects.length === 0) {\n // Loopback client whose metadata we couldn't dereference: allow loopback redirects only.\n try {\n const r = new URL(q.redirect_uri!);\n redirectOk = r.protocol === \"http:\" && isLoopbackHost(r.hostname);\n } catch { /* leave false */ }\n }\n if (!redirectOk) {\n return { ok: false, error: \"invalid_request\", description: \"redirect_uri is not listed in the client metadata document\" };\n }\n } else {\n let redirectOk = false;\n try {\n const r = new URL(q.redirect_uri!);\n redirectOk = r.protocol === \"https:\" || (r.protocol === \"http:\" && isLoopbackHost(r.hostname));\n } catch { /* leave false */ }\n if (!redirectOk) {\n return { ok: false, error: \"invalid_request\", description: \"redirect_uri must be https (or http on loopback)\" };\n }\n }\n return { ok: true };\n}\n\nconst AUTHZ_PARAMS = [\"response_type\", \"client_id\", \"redirect_uri\", \"resource\", \"scope\", \"state\", \"code_challenge\", \"code_challenge_method\"];\nconst escapeHtml = (s: string) =>\n s.replace(/&/g, \"&\").replace(//g, \">\").replace(/\"/g, \""\").replace(/'/g, \"'\");\n\napp.get(\"/authorize\", async (c) => {\n const q = c.req.query();\n // Bare browser visit keeps the explanatory stub.\n if (!q.client_id || !q.redirect_uri) return c.html(xaaAuthorizeStub(URLS.as2, q), 400);\n const check = await checkAuthorizeRequest(q);\n if (!check.ok) {\n console.error(\"[as2] /authorize rejected:\", { ...check, client_id: q.client_id, redirect_uri: q.redirect_uri, resource: q.resource });\n return c.json({ error: check.error, error_description: check.description }, 400);\n }\n\n const hidden = AUTHZ_PARAMS.filter((k) => q[k])\n .map((k) => ``)\n .join(\"\\n\");\n console.log(\"[as2] /authorize consent page:\", { client_id: q.client_id, redirect_uri: q.redirect_uri, scope: q.scope });\n return c.html(`Authorize — AS2\n\n\n

Authorize access

Signed in as ${escapeHtml(PERSONAL_USER.email)} (sub: ${escapeHtml(PERSONAL_USER.sub)})

Client ${escapeHtml(q.client_id)} is requesting:

${escapeHtml(q.scope || \"(no scopes requested)\")}

\n\n

`);\n});\n\napp.post(\"/authorize\", async (c) => {\n const form = await c.req.parseBody();\n const q: Record = {};\n for (const k of AUTHZ_PARAMS) if (typeof form[k] === \"string\") q[k] = form[k] as string;\n if (!q.client_id || !q.redirect_uri) {\n return c.json({ error: \"invalid_request\", error_description: \"client_id and redirect_uri are required\" }, 400);\n }\n const check = await checkAuthorizeRequest(q);\n if (!check.ok) {\n console.error(\"[as2] /authorize (POST) rejected:\", { ...check, client_id: q.client_id, redirect_uri: q.redirect_uri, resource: q.resource });\n return c.json({ error: check.error, error_description: check.description }, 400);\n }\n\n const code = await new jose.SignJWT({\n use: \"authorization_code\",\n client_id: q.client_id,\n redirect_uri: q.redirect_uri,\n resource: q.resource ?? RESOURCES[0],\n ...(q.scope ? { scope: q.scope } : {}),\n ...(q.code_challenge ? { code_challenge: q.code_challenge } : {}),\n })\n .setProtectedHeader({ alg: \"ES256\", kid: kp.kid })\n .setIssuer(URLS.as2)\n .setAudience(`${URLS.as2}/token`)\n .setSubject(PERSONAL_USER.sub)\n .setIssuedAt()\n .setExpirationTime(\"5m\")\n .sign(kp.privateKey);\n\n const target = new URL(q.redirect_uri);\n target.searchParams.set(\"code\", code);\n if (q.state) target.searchParams.set(\"state\", q.state);\n console.log(\"[as2] /authorize approved:\", { client_id: q.client_id, redirect_uri: q.redirect_uri, resource: q.resource, scope: q.scope });\n return c.redirect(target.toString(), 302);\n});\n\n// ─── /register — bring your own client_id ───────────────────────────────────\n// You bring the client_id your IdP will stamp in the JAG (for Okta: the\n// resource app's Okta-issued id; for the demo IdP: your idp_id_...). We give\n// you back a secret bound to (idp_issuer, that_client_id, resource). The\n// secret IS the trust decision — at /token we re-derive it from the JAG's\n// iss + client_id + resource and it has to match.\n\nconst RESOURCES = [`${URLS.rs2}/mcp`];\n\napp.get(\"/register\", (c) =>\n c.html(`Register — AS2\n\n

Register at AS2

You bring the client_id — whatever your IdP stamps in the JAG's client_id claim. For Okta that's the resource app's Okta client_id (e.g. 0oa10m6h81mEkTVXn698). For the demo IdP it's your idp_id_....

We bind a secret to (idp_issuer, client_id, resource). At /token we re-derive the secret from the JAG claims — that's the trust gate. No separate issuer allowlist.

\n`));\n\napp.post(\"/register\", async (c) => {\n const contentType = c.req.header(\"Content-Type\") ?? \"\";\n\n // RFC 7591 DCR (JSON) — toolbox hits this via get_or_register_client_credentials.\n // We don't know the issuer or resource from a standard DCR body, so assume\n // claude.ai + the single RS we front. The derived secret is stateless and\n // will re-derive identically at /token from (JAG.iss, client_id, body.resource).\n if (contentType.includes(\"application/json\")) {\n const body = await c.req.json(); // consume + ignore body (redirect_uris, grant_types, etc.)\n const clientId = `claude_${crypto.randomUUID().slice(0, 12)}`;\n const resource = RESOURCES[0];\n const clientSecret = await deriveAs2Secret(CLAUDE_AI_ISS, clientId, resource);\n return c.json({\n client_id: clientId,\n client_secret: clientSecret,\n client_id_issued_at: Math.floor(Date.now() / 1000),\n grant_types: [JWT_BEARER_GRANT],\n redirect_uris: body.redirect_uris ?? [],\n token_endpoint_auth_method: \"client_secret_post\",\n // echoed so the caller can sanity-check the binding if they care\n _issuer_binding: CLAUDE_AI_ISS,\n _resource_binding: resource,\n }, 201);\n }\n\n // Form POST — manual registration (Okta / demo-IdP path)\n const body = await c.req.parseBody();\n const idpIssuer = (body.idp_issuer as string)?.replace(/\\/$/, \"\");\n const jagClientId = body.jag_client_id as string;\n const resource = body.resource as string;\n if (!idpIssuer || !jagClientId || !resource) {\n return c.json({ error: \"invalid_request\", error_description: \"idp_issuer, jag_client_id, resource required\" }, 400);\n }\n const client_secret = await deriveAs2Secret(idpIssuer, jagClientId, resource);\n return c.json({ client_id: jagClientId, client_secret, idp_issuer: idpIssuer, resource });\n});\n\n// ─── /token — jwt-bearer ────────────────────────────────────────────────────\n// The secret IS the trust decision. Re-derive from JAG.iss + authenticating\n// client_id + resource; if the presented secret matches, you registered for\n// exactly this tuple. Then verify the JAG sig against that issuer's JWKS.\n\napp.post(\"/token\", async (c) => {\n const body = await c.req.parseBody();\n\n // ── authorization_code + PKCE — the CIMD path. The code is the JWT we\n // signed at /authorize, so verification is local; nothing to look up.\n if (body.grant_type === \"authorization_code\") {\n // Client auth on this grant is client_id binding only (the code is bound\n // to client_id; PKCE is the proof) — secrets aren't verified, so the\n // STATIC_TEST_CLIENT pair works here too.\n let cimdClientId = body.client_id as string | undefined;\n const basicAuthz = c.req.header(\"Authorization\");\n if (!cimdClientId && basicAuthz?.startsWith(\"Basic \")) {\n cimdClientId = decodeURIComponent(atob(basicAuthz.slice(6)).split(\":\")[0]);\n }\n const code = body.code as string | undefined;\n if (!cimdClientId || !code) {\n return c.json({ error: \"invalid_request\", error_description: \"client_id and code are required\" }, 400);\n }\n let codeClaims: jose.JWTPayload;\n try {\n ({ payload: codeClaims } = await jose.jwtVerify(code, kp.publicKey, {\n issuer: URLS.as2,\n audience: `${URLS.as2}/token`,\n }));\n } catch (e) {\n return c.json({ error: \"invalid_grant\", error_description: `invalid or expired code: ${e instanceof Error ? e.message : e}` }, 400);\n }\n if (codeClaims.client_id !== cimdClientId) {\n return c.json({ error: \"invalid_grant\", error_description: \"code was issued to a different client_id\" }, 400);\n }\n if (body.redirect_uri && body.redirect_uri !== codeClaims.redirect_uri) {\n return c.json({ error: \"invalid_grant\", error_description: \"redirect_uri mismatch\" }, 400);\n }\n if (codeClaims.code_challenge) {\n const verifier = body.code_verifier as string | undefined;\n if (!verifier) {\n return c.json({ error: \"invalid_grant\", error_description: \"code_verifier is required (PKCE)\" }, 400);\n }\n const digest = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(verifier));\n if (b64url(digest) !== codeClaims.code_challenge) {\n return c.json({ error: \"invalid_grant\", error_description: \"PKCE verification failed\" }, 400);\n }\n }\n const aud = (codeClaims.resource as string | undefined) ?? (body.resource as string | undefined) ?? RESOURCES[0];\n const scope = codeClaims.scope as string | undefined;\n const accessToken = await new jose.SignJWT({ client_id: cimdClientId, ...(scope ? { scope } : {}) })\n .setProtectedHeader({ alg: \"ES256\", kid: kp.kid })\n .setIssuer(URLS.as2)\n .setAudience(aud)\n .setSubject(codeClaims.sub!)\n .setIssuedAt()\n .setExpirationTime(\"1h\")\n .sign(kp.privateKey);\n console.log(\"[as2] /token authorization_code (CIMD):\", { client_id: cimdClientId, aud, scope });\n return c.json({ access_token: accessToken, token_type: \"Bearer\", expires_in: 3600, ...(scope ? { scope } : {}) });\n }\n\n if (body.grant_type !== JWT_BEARER_GRANT) {\n return c.json({ error: \"unsupported_grant_type\", error_description: String(body.grant_type) }, 400);\n }\n\n let clientId: string | undefined, clientSecret: string | undefined;\n const authz = c.req.header(\"Authorization\");\n if (authz?.startsWith(\"Basic \")) {\n const decoded = atob(authz.slice(6));\n const sep = decoded.indexOf(\":\");\n clientId = decodeURIComponent(decoded.slice(0, sep));\n clientSecret = decodeURIComponent(decoded.slice(sep + 1));\n } else {\n clientId = body.client_id as string;\n clientSecret = body.client_secret as string;\n }\n // CIMD clients (client_id = https URL) are public — no secret to present.\n const isCimdClient = !!clientId && !clientSecret && isCimdClientId(clientId);\n if (!clientId || (!clientSecret && !isCimdClient)) {\n return c.json({ error: \"invalid_client\", error_description: \"missing client credentials\" }, 401);\n }\n console.log(\"[as2] /token client auth:\", {\n via: isCimdClient ? \"cimd\" : authz?.startsWith(\"Basic \") ? \"basic\" : \"body\",\n client_id: clientId,\n secret_prefix: clientSecret ? clientSecret.slice(0, 12) + \"…\" : \"(none)\",\n body_resource: body.resource,\n body_scope: body.scope,\n });\n\n const assertion = body.assertion as string;\n if (!assertion) {\n return c.json({ error: \"invalid_request\", error_description: \"missing assertion\" }, 400);\n }\n\n // Spec draft says `typ: oauth-id-jag+jwt`. Okta sets it. PyJWT (toolbox)\n // defaults to `typ: JWT` — neither wrong per RFC 7523. Accept either or absent.\n const header = jose.decodeProtectedHeader(assertion);\n if (header.typ && header.typ !== ID_JAG_TYP && header.typ.toLowerCase() !== \"jwt\") {\n return c.json({ error: \"invalid_grant\", error_description: `typ must be ${ID_JAG_TYP} or JWT, got ${header.typ}` }, 400);\n }\n\n // Unsafe decode — sig verified below, AFTER the secret check proves we\n // trust this issuer for this client.\n const unverified = jose.decodeJwt(assertion);\n console.log(\"[as2] /token ID-JAG claims:\", { header: { typ: header.typ, alg: header.alg, kid: header.kid }, payload: unverified });\n const iss = (unverified.iss ?? \"\").replace(/\\/$/, \"\");\n if (!iss) {\n return c.json({ error: \"invalid_grant\", error_description: \"ID-JAG missing iss\" }, 400);\n }\n // Spec §3.1: `resource` in the JAG is OPTIONAL. Okta may omit it.\n // Fall back to the RFC 8707 request param — CC always sends it.\n const jagResource = (unverified.resource as string | undefined) ?? (body.resource as string | undefined);\n if (!jagResource) {\n return c.json({ error: \"invalid_grant\", error_description: \"no resource: ID-JAG omits the claim and request lacks the parameter\" }, 400);\n }\n\n // Spec binding — JAG says it's for client_id X, you must be authing as X.\n // Cheap check; do it before crypto.\n if (unverified.client_id !== clientId) {\n return c.json({\n error: \"invalid_grant\",\n error_description: `ID-JAG client_id (${unverified.client_id}) != authenticating client (${clientId})`,\n }, 400);\n }\n\n // Trust gate. CIMD clients have no registration step — the client_id binding\n // check above plus the JAG signature check below carry the trust, and the\n // metadata document has to dereference. Registered clients keep the\n // re-derived-secret gate: a match means you registered for exactly this tuple.\n if (clientId === STATIC_TEST_CLIENT.client_id && clientSecret === STATIC_TEST_CLIENT.client_secret) {\n // static test creds — tuple-independent; the JAG client_id binding above still applies\n } else if (isCimdClient) {\n try {\n await fetchCimd(clientId);\n } catch (e) {\n return c.json({ error: \"invalid_client\", error_description: `client metadata document fetch failed: ${e instanceof Error ? e.message : e}` }, 401);\n }\n } else if (clientSecret !== await deriveAs2Secret(iss, clientId, jagResource)) {\n return c.json({\n error: \"invalid_client\",\n error_description: `secret not bound to (iss=${iss}, client_id, resource). Register at ${URLS.as2}/register`,\n }, 401);\n }\n\n // Now we trust `iss` enough to fetch its keys.\n let claims: jose.JWTPayload;\n try {\n const { payload } = await jose.jwtVerify(assertion, await jwksFor(iss), {\n issuer: iss,\n // RFC 7523 §3 says token-endpoint URL MAY be the aud. Okta uses the\n // issuer URL; toolbox uses the token endpoint; tenanted discovery may\n // derive a path-scoped variant (/). Tenants are\n // open-ended, so check manually instead of an exact-match list.\n clockTolerance: 30,\n });\n const audList = Array.isArray(payload.aud) ? payload.aud : payload.aud ? [payload.aud] : [];\n if (!audList.some((a) => a === URLS.as2 || a.startsWith(`${URLS.as2}/`))) {\n throw new Error(`unexpected aud ${JSON.stringify(payload.aud)}`);\n }\n claims = payload;\n } catch (e) {\n // DEBUG: jose errors are terse — log header vs configured-key so kid/alg\n // mismatches and double-wrapped JWKS are obvious in the val logs.\n let cfg: unknown;\n try { cfg = CLAUDE_AI_JWK ? JSON.parse(CLAUDE_AI_JWK) : undefined; } catch { cfg = \"\"; }\n console.error(\"[as2] ID-JAG verify failed\", {\n iss,\n tokenHeader: header, // alg + kid the token was signed with\n configuredClaudeJwk: iss === CLAUDE_AI_ISS ? cfg : \"\",\n err: { name: (e as Error)?.name, code: (e as { code?: string })?.code, message: (e as Error)?.message },\n });\n return c.json({ error: \"invalid_grant\", error_description: `ID-JAG verify failed (iss=${iss}): ${e instanceof Error ? e.message : e}` }, 400);\n }\n\n // RBAC×EMA: surface every scope source so upstream changes are observable.\n // Access token currently carries no scope claim — grant-through is TODO.\n console.log(\"[as2] /token jwt-bearer scopes:\", {\n request_param: body.scope, // RFC 6749 scope param on the token POST\n jag_scope: claims.scope, // space-delimited string form\n jag_scp: claims.scp, // array form (Okta)\n });\n\n const accessToken = await new jose.SignJWT({})\n .setProtectedHeader({ alg: \"ES256\", kid: kp.kid })\n .setIssuer(URLS.as2)\n .setAudience(jagResource)\n .setSubject(claims.sub!)\n .setIssuedAt()\n .setExpirationTime(\"1h\")\n .sign(kp.privateKey);\n\n return c.json({ access_token: accessToken, token_type: \"Bearer\", expires_in: 3600 });\n});\n\n// ─── Debug — demo-IdP path only (can't mint Okta id_tokens) ─────────────────\n\napp.get(\"/debug/context\", async (c) => {\n const idToken = await fetch(`${URLS.idp}/debug/mint-id-token`).then((r) => r.text());\n const { idp, as } = await debugCredsAs2();\n return c.json({\n client_id: as.client_id,\n client_secret: as.client_secret,\n idp_client_id: idp.client_id,\n idp_client_secret: idp.client_secret,\n idp_id_token: idToken,\n idp_token_endpoint: `${URLS.idp}/token`,\n });\n});\n\n// ─── Index ──────────────────────────────────────────────────────────────────\n\napp.get(\"/\", (c) =>\n c.html(indexPage({\n role: \"AS\",\n name: \"xaa-mcp-as2\",\n endpoints: [\n { method: \"GET\", path: \"/.well-known/oauth-authorization-server\" },\n { method: \"GET\", path: \"/.well-known/jwks.json\" },\n { method: \"GET\", path: \"/demo-client-metadata.json\", note: \"sample CIMD document — use its URL as client_id to try the flow\" },\n { method: \"GET\", path: \"/authorize\", note: \"authorization_code + PKCE; CIMD (https URL) or DCR client_ids; consent page approves as the demo user\" },\n { method: \"GET\", path: \"/register\", note: \"bring your own client_id; we bind a secret to (iss, id, resource). CIMD clients skip this\" },\n { method: \"POST\", path: \"/token\", note: \"authorization_code + jwt-bearer; CIMD or secret-as-trust\" },\n { method: \"GET\", path: \"/debug/context\", note: \"conformance ctx (demo-IdP path)\" },\n ],\n })));\n\napp.onError((err) => { throw err; });\n\nexport default app.fetch;\nif (import.meta.main) Deno.serve({ port: 3005 }, app.fetch);\n","xaa-mcp-as2-jlu","children",[],[109],["D",1778187017209],[122,123,124,125],[19],{"_36":95,"_13":96,"_65":97,"_67":68,"_69":70,"_71":98,"_73":74,"_38":135,"_17":72,"_76":77,"_78":100,"_80":51,"_81":-5,"_116":136,"_18":137},{"_36":89,"_13":90,"_65":91,"_67":68,"_69":70,"_71":72,"_73":74,"_38":132,"_17":34,"_76":77,"_78":93,"_80":51,"_81":-5,"_116":133,"_18":134},{"_36":83,"_13":84,"_65":85,"_67":68,"_69":70,"_71":72,"_73":74,"_38":129,"_17":34,"_76":77,"_78":87,"_80":51,"_81":-5,"_116":130,"_18":131},{"_36":63,"_13":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":74,"_38":126,"_17":34,"_76":77,"_78":79,"_80":51,"_81":-5,"_116":127,"_18":128},["D",1778187017209],[],[19,64],["D",1778187017209],[],[19,84],["D",1778187017209],[],[19,90],["D",1780028604779],[],[19,96],"5a8fc47c-4a56-11f1-8b70-ee650bb23af1",["D",1778187017209],"legacyEnvVars","httpPrivacy","description","imageUrl","userId","f6016879-c05b-4822-8e40-a3b6bd7a7e8a","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","019e0433-9f2e-749c-bf05-4b5f5a8e723b","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_181":177},"org",{"_11":12,"_174":175,"_176":177,"_144":145,"_178":179,"_180":51},"branch",{"_17":111,"_13":16,"_36":70,"_42":138,"_45":37,"_46":44,"_171":53,"_172":43,"_173":57,"_58":14,"_54":12},"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","displayName","Justin Lu","avatar","https://lh3.googleusercontent.com/a/ACg8ocK3SYoizVYImoeptY6sq74_q6gNsNUG1dJKtPCpRH1O99Wt0eQ=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_36":138,"_13":14,"_38":244,"_49":-5,"_140":51,"_52":53,"_141":53,"_142":-5,"_143":-5,"_144":145,"_146":-5,"_147":51,"_148":-5,"_149":-5,"_150":34,"_56":151,"_152":-5,"_153":-5,"_154":-5,"_155":-5,"_156":157,"_158":157,"_159":160,"_161":160,"_162":160,"_163":157,"_164":157,"_165":245,"_167":246,"_169":247,"_50":51},[226,231],"files",[226,227,228,229,230,231],"counts",{"_217":34,"_218":72,"_219":72,"_35":220,"_221":222},[209,210,211,212],{"_36":102,"_13":19,"_65":68,"_67":-5,"_69":70,"_71":72,"_73":74,"_38":207,"_17":34,"_76":103,"_78":-5,"_80":51,"_81":-5,"_18":208},"upstreamProject",{"_36":43,"_13":14,"_142":-5,"_143":-5,"_52":53,"_165":205},"upstreamBranch",{"_36":37,"_38":203,"_40":204,"_13":16,"_42":43,"_17":44,"_45":-5,"_46":-5,"_47":48,"_49":-5,"_50":51,"_52":53,"_54":55,"_56":57,"_58":14},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1772721388727],["D",1777487960793],{"_11":55,"_181":206},"https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yZjg2YXM0MEVRM0hKQzVqcFJ5aHZteXUxUjUifQ",["D",1778187017209],[19],{"_36":95,"_13":96,"_65":97,"_67":68,"_69":70,"_71":98,"_73":74,"_38":99,"_17":72,"_76":77,"_78":100,"_80":51,"_81":-5,"_18":216},{"_36":89,"_13":90,"_65":91,"_67":68,"_69":70,"_71":72,"_73":74,"_38":92,"_17":34,"_76":77,"_78":93,"_80":51,"_81":-5,"_18":215},{"_36":83,"_13":84,"_65":85,"_67":68,"_69":70,"_71":72,"_73":74,"_38":86,"_17":34,"_76":77,"_78":87,"_80":51,"_81":-5,"_18":214},{"_36":63,"_13":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":74,"_38":75,"_17":34,"_76":77,"_78":79,"_80":51,"_81":-5,"_18":213},[19,64],[19,84],[19,90],[19,96],"pulls","branches","forks",{"_223":72,"_225":72},"connections",{"_223":34,"_224":34},"count","unfilledCount","emptyCount",{"_36":102,"_13":19,"_65":68,"_67":-5,"_69":70,"_71":72,"_73":74,"_38":119,"_17":34,"_76":103,"_78":-5,"_80":51,"_81":-5,"_116":242,"_18":243},{"_36":95,"_13":96,"_65":97,"_67":68,"_69":70,"_71":98,"_73":74,"_38":135,"_17":72,"_76":77,"_78":100,"_80":51,"_81":-5,"_116":240,"_18":241},{"_36":89,"_13":90,"_65":91,"_67":68,"_69":70,"_71":72,"_73":74,"_38":132,"_17":34,"_76":77,"_78":93,"_80":51,"_81":-5,"_116":238,"_18":239},{"_36":83,"_13":84,"_65":85,"_67":68,"_69":70,"_71":72,"_73":74,"_38":129,"_17":34,"_76":77,"_78":87,"_80":51,"_81":-5,"_116":236,"_18":237},{"_36":63,"_13":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":74,"_38":126,"_17":34,"_76":77,"_78":79,"_80":51,"_81":-5,"_116":234,"_18":235},{"_36":108,"_13":109,"_65":110,"_67":-5,"_69":70,"_71":111,"_73":74,"_38":112,"_17":44,"_76":113,"_78":114,"_80":51,"_81":115,"_116":232,"_18":233},[],[109],[],[19,64],[],[19,84],[],[19,90],[],[19,96],[227,228,229,230],[19],["D",1778187017209],{"_11":12,"_181":177},{"_11":12,"_174":175,"_176":177,"_144":145,"_178":179,"_180":51},{"_17":111,"_13":16,"_36":70,"_42":138,"_45":37,"_46":44,"_171":53,"_172":43,"_173":57,"_58":14,"_54":12},"ctx",{"_165":-5,"_200":281,"_282":283,"_284":285,"_286":51,"_287":51,"_288":51,"_289":74,"_290":-5,"_291":-7,"_292":-7,"_293":34,"_294":51,"_295":51,"_296":-5,"_297":51,"_298":51,"_299":51,"_300":-5},"ENV",{"_252":253,"_254":255,"_256":16,"_257":258,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":270,"_271":272,"_273":274,"_275":276,"_277":278,"_279":280},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

This AS doesn't do /authorize

Request parameters received

${opts.name}

Authorize access

Register at AS2

This AS doesn't do `/authorize`