[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_166":167,"_168":169},"routes/_app.x.$handle.$name",{"_95":94,"_32":44,"_103":85,"_27":104,"_13":14,"_105":-5,"_11":106,"_107":108,"_109":110,"_111":112,"_113":114,"_20":-5,"_115":-5,"_116":-5,"_117":25,"_118":119,"_120":57,"_121":-5,"_122":-5,"_123":124},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_32":44,"_37":45,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":-5,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":57,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",12,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":20,"_34":36,"_37":38,"_39":14,"_40":41,"_24":25},"previous",{"_30":31,"_32":28,"_33":20,"_34":35},"deleted",false,"deletedHere","path","mcp-server.ts","latestPath","fileId","c5234dbc-7e6f-11f0-8554-0224a6c84d84","name","fileType","content","import { Hono } from \"npm:hono@3\";\nimport { McpServer } from \"npm:@modelcontextprotocol/sdk/server/mcp.js\";\nimport { toFetchResponse, toReqRes } from \"npm:fetch-to-node\";\nimport { StreamableHTTPServerTransport } from \"npm:@modelcontextprotocol/sdk/server/streamableHttp.js\";\nimport { z } from \"npm:zod@3.23.8\";\nimport { CallToolResult } from \"npm:@modelcontextprotocol/sdk/types.js\";\n\nexport interface ServerConfig {\n type: \"resource\" | \"auth\";\n name: string;\n port?: number;\n\n // Resource server specific\n metadataPath?: string;\n authServerUrl?: string;\n includeWwwAuthenticate?: boolean; // Whether to include WWW-Authenticate header\n\n // Auth server specific\n issuer?: string;\n tenantPath?: string;\n\n // Common\n fixedAccessToken: string;\n fixedRefreshToken?: string;\n fixedClientId?: string;\n fixedAuthCode?: string;\n}\n\nconst createMcpServer = (config: ServerConfig) => {\n const server = new McpServer({\n name: config.name,\n version: \"1.0.0\",\n }, {\n capabilities: {\n // logging: {},\n },\n });\n\n // Register a simple addition tool\n server.registerTool(\n \"add\",\n {\n title: \"Add tool\",\n description: \"A simple addition tool\",\n inputSchema: {\n a: z.number().describe(\"First number\"),\n b: z.number().describe(\"Second number\"),\n },\n },\n async ({ a, b }): Promise => {\n return {\n content: [\n {\n type: \"text\",\n text: `${a} + ${b} = ${a + b}`,\n },\n ],\n };\n },\n );\n\n return server;\n};\n\nfunction generateIndexHtml(config: ServerConfig): string {\n const serverType = config.type === \"resource\" ? \"Resource Server\" : \"Authorization Server\";\n\n const configDetails = Object.entries(config)\n .filter(([key, value]) => value !== undefined && key !== \"port\")\n .map(([key, value]) => {\n const formattedKey = key.replace(/([A-Z])/g, ' $1').toLowerCase()\n .replace(/^./, str => str.toUpperCase())\n .replace('_', ' ');\n return `${formattedKey}:${value}`;\n })\n .join('\\n');\n\n return `\n\n\n \n \n ${config.name} - MCP OAuth ${serverType}\n \n\n\n

${serverType}

${config.name}

\n\n

Configuration

\n \n ${configDetails}\n

\n\n

Available Endpoints

\n ${config.type === \"resource\" ? `\n

GET /health

GET ${config.metadataPath || '/.well-known/oauth-protected-resource'}

POST /mcp (requires Bearer token)

\n \n

\n ` : `\n

GET /health

GET /.well-known/openid-configuration

GET /authorize

POST /token

\n \n

\n `}\n

\n\n \n

\n\n

\n Note: This is an MCP OAuth example server for testing and development purposes.\n ${config.type === \"resource\"\n ? `Access to the /mcp endpoint requires a valid Bearer token: ${config.fixedAccessToken}`\n : `This server uses fixed test credentials for demonstration purposes.`\n }\n

\n \n\n`;\n}\n\nfunction createResourceServer(config: ServerConfig) {\n const app = new Hono();\n\n // Root index page\n app.get(\"/\", (c) => c.html(generateIndexHtml(config)));\n\n // Health check endpoint\n app.get(\"/health\", (c) => c.json({ status: \"ok\", server: config.name }));\n\n // OAuth Protected Resource metadata endpoint\n app.get(config.metadataPath!, (c) => {\n const resourceUrl = `https://${c.req.header(\"host\")}/mcp`;\n const authServers = config.tenantPath\n ? [`${config.authServerUrl}${config.tenantPath}`]\n : [config.authServerUrl!];\n\n return c.json({\n resource: resourceUrl,\n authorization_servers: authServers,\n });\n });\n\n // MCP endpoint with auth\n app.post(\"/mcp\", async (c) => {\n // Check for bearer token\n const authHeader = c.req.header(\"Authorization\");\n if (!authHeader || !authHeader.startsWith(\"Bearer \")) {\n const resourceMetadataUrl = `https://${c.req.header(\"host\")}${config.metadataPath}`;\n\n const responseHeaders: Record = {};\n\n // Only include WWW-Authenticate header if configured\n if (config.includeWwwAuthenticate !== false) {\n responseHeaders[\"WWW-Authenticate\"] = `Bearer resource_metadata=\"${resourceMetadataUrl}\"`;\n }\n\n return c.json({\n jsonrpc: \"2.0\",\n error: {\n code: -32001,\n message: \"Authentication required\",\n },\n id: null,\n }, {\n status: 401,\n headers: responseHeaders,\n });\n }\n\n const token = authHeader.substring(7);\n if (token !== config.fixedAccessToken) {\n return c.json({\n jsonrpc: \"2.0\",\n error: {\n code: -32001,\n message: \"Invalid token\",\n },\n id: null,\n }, { status: 401 });\n }\n\n // Handle MCP request\n const { req, res } = toReqRes(c.req.raw);\n const server = createMcpServer(config);\n\n try {\n const transport = new StreamableHTTPServerTransport({\n sessionIdGenerator: undefined,\n });\n\n transport.onerror = console.error.bind(console);\n\n await server.connect(transport);\n\n const body = await c.req.json();\n\n await transport.handleRequest(req, res, body);\n\n console.log(`${new Date().toISOString()} MCP request handled`);\n\n res.on(\"close\", () => {\n console.log(`${new Date().toISOString()} Request closed`);\n transport.close();\n server.close();\n });\n\n return toFetchResponse(res);\n } catch (error) {\n console.error(\"Error handling MCP request:\", error);\n\n try {\n server.close();\n } catch (cleanupError) {\n console.error(\"Error during cleanup:\", cleanupError);\n }\n return c.json(\n {\n jsonrpc: \"2.0\",\n error: {\n code: -32603,\n message: \"Internal server error\",\n },\n id: null,\n },\n { status: 500 },\n );\n }\n });\n\n return app;\n}\n\nfunction createAuthServer(config: ServerConfig) {\n const app = new Hono();\n\n // Root index page\n app.get(\"/\", (c) => c.html(generateIndexHtml(config)));\n\n // OAuth Authorization Server Metadata endpoint\n const metadataPath = config.tenantPath\n ? `/.well-known/oauth-authorization-server${config.tenantPath}`\n : \"/.well-known/oauth-authorization-server\";\n\n app.get(metadataPath, (c) => {\n const baseUrl = `https://${c.req.header(\"host\")}`;\n const issuer = config.issuer || (config.tenantPath ? `${baseUrl}${config.tenantPath}` : baseUrl);\n\n const metadata = {\n issuer: issuer,\n authorization_endpoint: `${baseUrl}/authorize`,\n token_endpoint: `${baseUrl}/token`,\n registration_endpoint: `${baseUrl}/register`,\n jwks_uri: `${baseUrl}/jwks`,\n response_types_supported: [\"code\"],\n subject_types_supported: [\"public\"],\n id_token_signing_alg_values_supported: [\"RS256\"],\n scopes_supported: [\"openid\", \"profile\", \"email\", \"offline_access\"],\n token_endpoint_auth_methods_supported: [\"client_secret_basic\", \"client_secret_post\"],\n claims_supported: [\"sub\", \"name\", \"email\"],\n code_challenge_methods_supported: [\"plain\", \"S256\"],\n grant_types_supported: [\"authorization_code\", \"refresh_token\"],\n response_modes_supported: [\"query\", \"fragment\"],\n authorization_response_iss_parameter_supported: true,\n backchannel_logout_supported: false,\n frontchannel_logout_supported: false,\n end_session_endpoint: `${baseUrl}/logout`,\n request_parameter_supported: false,\n request_uri_parameter_supported: false,\n };\n\n return c.json(metadata);\n });\n\n // Mock authorization endpoint\n app.get(\"/authorize\", (c) => {\n const redirectUri = c.req.query(\"redirect_uri\");\n const state = c.req.query(\"state\");\n const codeChallenge = c.req.query(\"code_challenge\");\n const codeChallengeMethod = c.req.query(\"code_challenge_method\");\n\n if (!redirectUri) {\n return c.text(\"redirect_uri is required\", 400);\n }\n\n // Store code challenge for PKCE validation (in real impl, store in DB)\n console.log(\"PKCE:\", { codeChallenge, codeChallengeMethod });\n\n // In real implementation, show login/consent screen\n // For testing, immediately redirect with code\n const code = config.fixedAuthCode || \"test_auth_code_123\";\n const params = new URLSearchParams({\n code,\n ...(state && { state }),\n });\n\n const authorizeRedirectUrl = `${redirectUri}?${params}`;\n return c.redirect(authorizeRedirectUrl);\n });\n\n // Mock token endpoint\n app.post(\"/token\", async (c) => {\n const contentType = c.req.header(\"Content-Type\");\n let grantType, code, refreshToken, codeVerifier;\n\n if (contentType?.includes(\"application/x-www-form-urlencoded\")) {\n const body = await c.req.text();\n const params = new URLSearchParams(body);\n grantType = params.get(\"grant_type\");\n code = params.get(\"code\");\n refreshToken = params.get(\"refresh_token\");\n codeVerifier = params.get(\"code_verifier\");\n } else {\n const body = await c.req.json();\n grantType = body.grant_type;\n code = body.code;\n refreshToken = body.refresh_token;\n codeVerifier = body.code_verifier;\n }\n\n // Validate PKCE if provided\n if (codeVerifier) {\n console.log(\"PKCE verification:\", { codeVerifier });\n // In real impl, verify against stored code_challenge\n }\n\n if (grantType === \"authorization_code\") {\n if (code !== (config.fixedAuthCode || \"test_auth_code_123\")) {\n return c.json({ error: \"invalid_grant\" }, 400);\n }\n\n return c.json({\n access_token: config.fixedAccessToken,\n token_type: \"Bearer\",\n expires_in: 3600,\n refresh_token: config.fixedRefreshToken || \"test_refresh_token_xyz\",\n scope: \"openid profile email\",\n });\n } else if (grantType === \"refresh_token\") {\n if (refreshToken !== (config.fixedRefreshToken || \"test_refresh_token_xyz\")) {\n return c.json({ error: \"invalid_grant\" }, 400);\n }\n\n return c.json({\n access_token: config.fixedAccessToken,\n token_type: \"Bearer\",\n expires_in: 3600,\n refresh_token: config.fixedRefreshToken || \"test_refresh_token_xyz\",\n scope: \"openid profile email\",\n });\n }\n\n return c.json({ error: \"unsupported_grant_type\" }, 400);\n });\n\n // Mock JWKS endpoint\n app.get(\"/jwks\", (c) => {\n return c.json({\n keys: [\n {\n kty: \"RSA\",\n use: \"sig\",\n kid: \"test-key-1\",\n alg: \"RS256\",\n n: \"xGOr-H7A-PWG\",\n e: \"AQAB\",\n },\n ],\n });\n });\n\n // Mock client registration endpoint\n app.post(\"/register\", async (c) => {\n const body = await c.req.json();\n\n return c.json({\n client_id: config.fixedClientId || \"test_client_id\",\n client_secret: \"test_client_secret\",\n client_id_issued_at: Math.floor(Date.now() / 1000),\n client_secret_expires_at: 0,\n redirect_uris: body.redirect_uris || [],\n token_endpoint_auth_method: \"client_secret_basic\",\n grant_types: [\"authorization_code\", \"refresh_token\"],\n response_types: [\"code\"],\n client_name: body.client_name || \"Test Client\",\n scope: body.scope || \"openid profile email\",\n });\n });\n\n // Mock logout endpoint\n app.get(\"/logout\", (c) => {\n return c.text(\"Logged out successfully\");\n });\n\n // Health check\n app.get(\"/health\", (c) => {\n return c.json({ status: \"ok\", server: config.name });\n });\n\n return app;\n}\n\nexport function createServer(config: ServerConfig) {\n const app = config.type === \"resource\"\n ? createResourceServer(config)\n : createAuthServer(config);\n\n return app.fetch;\n}\n\nexport function startServer(config: ServerConfig) {\n const app = config.type === \"resource\"\n ? createResourceServer(config)\n : createAuthServer(config);\n\n const port = config.type === \"resource\" ? 3000 : 3001\n\n const serverType = config.type === \"resource\" ? \"Resource\" : \"Auth\";\n console.log(`${serverType} Server (${config.name}) running at http://localhost:${port}`);\n\n if (config.type === \"resource\") {\n console.log(\"\\nEndpoints:\");\n console.log(` MCP: http://localhost:${port}/mcp`);\n console.log(` Metadata: http://localhost:${port}${config.metadataPath}`);\n console.log(` Health: http://localhost:${port}/health`);\n if (config.authServerUrl) {\n console.log(` Auth Server: ${config.authServerUrl}`);\n }\n } else {\n const metadataPath = config.tenantPath\n ? `/.well-known/oauth-authorization-server${config.tenantPath}`\n : \"/.well-known/oauth-authorization-server\";\n console.log(\"\\nEndpoints:\");\n console.log(` Metadata: http://localhost:${port}${metadataPath}`);\n console.log(` Authorize: http://localhost:${port}/authorize`);\n console.log(` Token: http://localhost:${port}/token`);\n console.log(` Health: http://localhost:${port}/health`);\n }\n\n Deno.serve({ port, hostname: \"127.0.0.1\" }, app.fetch);\n}\n","import { Hono } from \"npm:hono@3\";\nimport { McpServer } from \"npm:@modelcontextprotocol/sdk/server/mcp.js\";\nimport { toFetchResponse, toReqRes } from \"npm:fetch-to-node\";\nimport { StreamableHTTPServerTransport } from \"npm:@modelcontextprotocol/sdk/server/streamableHttp.js\";\nimport { z } from \"npm:zod@3.23.8\";\nimport { CallToolResult } from \"npm:@modelcontextprotocol/sdk/types.js\";\n\nexport interface ServerConfig {\n type: \"resource\" | \"auth\";\n name: string;\n port?: number;\n\n // Resource server specific\n metadataPath?: string;\n authServerUrl?: string;\n includeWwwAuthenticate?: boolean; // Whether to include WWW-Authenticate header\n\n // Auth server specific\n issuer?: string;\n tenantPath?: string;\n\n // Common\n fixedAccessToken: string;\n fixedRefreshToken?: string;\n fixedClientId?: string;\n fixedAuthCode?: string;\n}\n\nconst createMcpServer = (config: ServerConfig) => {\n const server = new McpServer({\n name: config.name,\n version: \"1.0.0\",\n }, {\n capabilities: {\n // logging: {},\n },\n });\n\n // Register a simple addition tool\n server.registerTool(\n \"add\",\n {\n title: \"Add tool\",\n description: \"A simple addition tool\",\n inputSchema: {\n a: z.number().describe(\"First number\"),\n b: z.number().describe(\"Second number\"),\n },\n },\n async ({ a, b }): Promise => {\n return {\n content: [\n {\n type: \"text\",\n text: `${a} + ${b} = ${a + b}`,\n },\n ],\n };\n },\n );\n\n return server;\n};\n\nfunction generateIndexHtml(config: ServerConfig): string {\n const serverType = config.type === \"resource\" ? \"Resource Server\" : \"Authorization Server\";\n\n const configDetails = Object.entries(config)\n .filter(([key, value]) => value !== undefined && key !== \"port\")\n .map(([key, value]) => {\n const formattedKey = key.replace(/([A-Z])/g, ' $1').toLowerCase()\n .replace(/^./, str => str.toUpperCase())\n .replace('_', ' ');\n return `${formattedKey}:${value}`;\n })\n .join('\\n');\n\n return `\n\n\n \n \n ${config.name} - MCP OAuth ${serverType}\n \n\n\n

${serverType}

${config.name}

\n\n

Configuration

\n \n ${configDetails}\n

\n\n

Available Endpoints

\n ${config.type === \"resource\" ? `\n

GET /health

GET ${config.metadataPath || '/.well-known/oauth-protected-resource'}

POST /mcp (requires Bearer token)

\n \n

\n ` : `\n

GET /health

GET /.well-known/openid-configuration

GET /authorize

POST /token

\n \n

\n `}\n

\n\n \n

\n\n

\n \n\n`;\n}\n\nfunction createResourceServer(config: ServerConfig) {\n const app = new Hono();\n\n // CORS middleware - apply to all routes\n app.use(\"*\", async (c, next) => {\n // Handle preflight requests\n if (c.req.method === \"OPTIONS\") {\n return new Response(null, {\n status: 204,\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization, mcp-protocol-version\",\n \"Access-Control-Max-Age\": \"86400\",\n },\n });\n }\n\n // Add CORS headers to all responses\n await next();\n\n // Add CORS headers after the response is generated\n c.header(\"Access-Control-Allow-Origin\", \"*\");\n c.header(\"Access-Control-Allow-Methods\", \"GET, POST, OPTIONS\");\n c.header(\"Access-Control-Allow-Headers\", \"Content-Type, Authorization\");\n\n // If WWW-Authenticate header is present, expose it\n if (c.res.headers.get(\"WWW-Authenticate\")) {\n c.header(\"Access-Control-Expose-Headers\", \"WWW-Authenticate\");\n }\n });\n\n // Root index page\n app.get(\"/\", (c) => c.html(generateIndexHtml(config)));\n\n // Health check endpoint\n app.get(\"/health\", (c) => c.json({ status: \"ok\", server: config.name }));\n\n // OAuth Protected Resource metadata endpoint\n app.get(config.metadataPath!, (c) => {\n const resourceUrl = `https://${c.req.header(\"host\")}/mcp`;\n const authServers = config.tenantPath\n ? [`${config.authServerUrl}${config.tenantPath}`]\n : [config.authServerUrl!];\n\n return c.json({\n resource: resourceUrl,\n authorization_servers: authServers,\n });\n });\n\n // MCP endpoint with auth\n app.post(\"/mcp\", async (c) => {\n // Check for bearer token\n const authHeader = c.req.header(\"Authorization\");\n if (!authHeader || !authHeader.startsWith(\"Bearer \")) {\n const resourceMetadataUrl = `https://${c.req.header(\"host\")}${config.metadataPath}`;\n\n const responseHeaders: Record = {};\n\n // Only include WWW-Authenticate header if configured\n if (config.includeWwwAuthenticate !== false) {\n responseHeaders[\"WWW-Authenticate\"] = `Bearer resource_metadata=\"${resourceMetadataUrl}\"`;\n }\n\n return c.json({\n jsonrpc: \"2.0\",\n error: {\n code: -32001,\n message: \"Authentication required\",\n },\n id: null,\n }, {\n status: 401,\n headers: responseHeaders,\n });\n }\n\n const token = authHeader.substring(7);\n if (token !== config.fixedAccessToken) {\n return c.json({\n jsonrpc: \"2.0\",\n error: {\n code: -32001,\n message: \"Invalid token\",\n },\n id: null,\n }, { status: 401 });\n }\n\n // Handle MCP request\n const { req, res } = toReqRes(c.req.raw);\n const server = createMcpServer(config);\n\n try {\n const transport = new StreamableHTTPServerTransport({\n sessionIdGenerator: undefined,\n });\n\n transport.onerror = console.error.bind(console);\n\n await server.connect(transport);\n\n const body = await c.req.json();\n\n await transport.handleRequest(req, res, body);\n\n console.log(`${new Date().toISOString()} MCP request handled`);\n\n res.on(\"close\", () => {\n console.log(`${new Date().toISOString()} Request closed`);\n transport.close();\n server.close();\n });\n\n return toFetchResponse(res);\n } catch (error) {\n console.error(\"Error handling MCP request:\", error);\n\n try {\n server.close();\n } catch (cleanupError) {\n console.error(\"Error during cleanup:\", cleanupError);\n }\n return c.json(\n {\n jsonrpc: \"2.0\",\n error: {\n code: -32603,\n message: \"Internal server error\",\n },\n id: null,\n },\n { status: 500 },\n );\n }\n });\n\n return app;\n}\n\nfunction createAuthServer(config: ServerConfig) {\n const app = new Hono();\n\n // Root index page\n app.get(\"/\", (c) => c.html(generateIndexHtml(config)));\n\n // OAuth Authorization Server Metadata endpoint\n const metadataPath = config.tenantPath\n ? `/.well-known/oauth-authorization-server${config.tenantPath}`\n : \"/.well-known/oauth-authorization-server\";\n\n app.get(metadataPath, (c) => {\n const baseUrl = `https://${c.req.header(\"host\")}`;\n const issuer = config.issuer || (config.tenantPath ? `${baseUrl}${config.tenantPath}` : baseUrl);\n\n const metadata = {\n issuer: issuer,\n authorization_endpoint: `${baseUrl}/authorize`,\n token_endpoint: `${baseUrl}/token`,\n registration_endpoint: `${baseUrl}/register`,\n jwks_uri: `${baseUrl}/jwks`,\n response_types_supported: [\"code\"],\n subject_types_supported: [\"public\"],\n id_token_signing_alg_values_supported: [\"RS256\"],\n scopes_supported: [\"openid\", \"profile\", \"email\", \"offline_access\"],\n token_endpoint_auth_methods_supported: [\"client_secret_basic\", \"client_secret_post\"],\n claims_supported: [\"sub\", \"name\", \"email\"],\n code_challenge_methods_supported: [\"plain\", \"S256\"],\n grant_types_supported: [\"authorization_code\", \"refresh_token\"],\n response_modes_supported: [\"query\", \"fragment\"],\n authorization_response_iss_parameter_supported: true,\n backchannel_logout_supported: false,\n frontchannel_logout_supported: false,\n end_session_endpoint: `${baseUrl}/logout`,\n request_parameter_supported: false,\n request_uri_parameter_supported: false,\n };\n\n return c.json(metadata);\n });\n\n // Mock authorization endpoint\n app.get(\"/authorize\", (c) => {\n const redirectUri = c.req.query(\"redirect_uri\");\n const state = c.req.query(\"state\");\n const codeChallenge = c.req.query(\"code_challenge\");\n const codeChallengeMethod = c.req.query(\"code_challenge_method\");\n\n if (!redirectUri) {\n return c.text(\"redirect_uri is required\", 400);\n }\n\n // Store code challenge for PKCE validation (in real impl, store in DB)\n console.log(\"PKCE:\", { codeChallenge, codeChallengeMethod });\n\n // In real implementation, show login/consent screen\n // For testing, immediately redirect with code\n const code = config.fixedAuthCode || \"test_auth_code_123\";\n const params = new URLSearchParams({\n code,\n ...(state && { state }),\n });\n\n const authorizeRedirectUrl = `${redirectUri}?${params}`;\n return c.redirect(authorizeRedirectUrl);\n });\n\n // Mock token endpoint\n app.post(\"/token\", async (c) => {\n const contentType = c.req.header(\"Content-Type\");\n let grantType, code, refreshToken, codeVerifier;\n\n if (contentType?.includes(\"application/x-www-form-urlencoded\")) {\n const body = await c.req.text();\n const params = new URLSearchParams(body);\n grantType = params.get(\"grant_type\");\n code = params.get(\"code\");\n refreshToken = params.get(\"refresh_token\");\n codeVerifier = params.get(\"code_verifier\");\n } else {\n const body = await c.req.json();\n grantType = body.grant_type;\n code = body.code;\n refreshToken = body.refresh_token;\n codeVerifier = body.code_verifier;\n }\n\n // Validate PKCE if provided\n if (codeVerifier) {\n console.log(\"PKCE verification:\", { codeVerifier });\n // In real impl, verify against stored code_challenge\n }\n\n if (grantType === \"authorization_code\") {\n if (code !== (config.fixedAuthCode || \"test_auth_code_123\")) {\n return c.json({ error: \"invalid_grant\" }, 400);\n }\n\n return c.json({\n access_token: config.fixedAccessToken,\n token_type: \"Bearer\",\n expires_in: 3600,\n refresh_token: config.fixedRefreshToken || \"test_refresh_token_xyz\",\n scope: \"openid profile email\",\n });\n } else if (grantType === \"refresh_token\") {\n if (refreshToken !== (config.fixedRefreshToken || \"test_refresh_token_xyz\")) {\n return c.json({ error: \"invalid_grant\" }, 400);\n }\n\n return c.json({\n access_token: config.fixedAccessToken,\n token_type: \"Bearer\",\n expires_in: 3600,\n refresh_token: config.fixedRefreshToken || \"test_refresh_token_xyz\",\n scope: \"openid profile email\",\n });\n }\n\n return c.json({ error: \"unsupported_grant_type\" }, 400);\n });\n\n // Mock JWKS endpoint\n app.get(\"/jwks\", (c) => {\n return c.json({\n keys: [\n {\n kty: \"RSA\",\n use: \"sig\",\n kid: \"test-key-1\",\n alg: \"RS256\",\n n: \"xGOr-H7A-PWG\",\n e: \"AQAB\",\n },\n ],\n });\n });\n\n // Mock client registration endpoint\n app.post(\"/register\", async (c) => {\n const body = await c.req.json();\n\n return c.json({\n client_id: config.fixedClientId || \"test_client_id\",\n client_secret: \"test_client_secret\",\n client_id_issued_at: Math.floor(Date.now() / 1000),\n client_secret_expires_at: 0,\n redirect_uris: body.redirect_uris || [],\n token_endpoint_auth_method: \"client_secret_basic\",\n grant_types: [\"authorization_code\", \"refresh_token\"],\n response_types: [\"code\"],\n client_name: body.client_name || \"Test Client\",\n scope: body.scope || \"openid profile email\",\n });\n });\n\n // Mock logout endpoint\n app.get(\"/logout\", (c) => {\n return c.text(\"Logged out successfully\");\n });\n\n // Health check\n app.get(\"/health\", (c) => {\n return c.json({ status: \"ok\", server: config.name });\n });\n\n return app;\n}\n\nexport function createServer(config: ServerConfig) {\n const app = config.type === \"resource\"\n ? createResourceServer(config)\n : createAuthServer(config);\n\n return app.fetch;\n}\n\nexport function startServer(config: ServerConfig) {\n const app = config.type === \"resource\"\n ? createResourceServer(config)\n : createAuthServer(config);\n\n const port = config.type === \"resource\" ? 3000 : 3001\n\n const serverType = config.type === \"resource\" ? \"Resource\" : \"Auth\";\n console.log(`${serverType} Server (${config.name}) running at http://localhost:${port}`);\n\n if (config.type === \"resource\") {\n console.log(\"\\nEndpoints:\");\n console.log(` MCP: http://localhost:${port}/mcp`);\n console.log(` Metadata: http://localhost:${port}${config.metadataPath}`);\n console.log(` Health: http://localhost:${port}/health`);\n if (config.authServerUrl) {\n console.log(` Auth Server: ${config.authServerUrl}`);\n }\n } else {\n const metadataPath = config.tenantPath\n ? `/.well-known/oauth-authorization-server${config.tenantPath}`\n : \"/.well-known/oauth-authorization-server\";\n console.log(\"\\nEndpoints:\");\n console.log(` Metadata: http://localhost:${port}${metadataPath}`);\n console.log(` Authorize: http://localhost:${port}/authorize`);\n console.log(` Token: http://localhost:${port}/token`);\n console.log(` Health: http://localhost:${port}/health`);\n }\n\n Deno.serve({ port, hostname: \"127.0.0.1\" }, app.fetch);\n}\n","createdAt",["D",1755781950815],"branchVersion","branchId","c4e6ba3c-7e6f-11f0-b3ed-0224a6c84d84","id","c4e66488-7e6f-11f0-b3ed-0224a6c84d84","mcp-oauth-client1",["D",1755767895836],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","f4518a30-f52b-4b12-891c-a8fffb7240f8","pinnedFileId","c4f9e86e-7e6f-11f0-b3ed-0224a6c84d84","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",1,"orgId","1d3af61b-92b3-4fbf-b22a-ca08b2122f4d","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_102":98},"org",{"_95":94,"_96":-5,"_97":98,"_18":53,"_99":100,"_101":25},"branch",{"_13":84,"_32":85,"_42":41,"_86":43,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":44,"_93":94},"isOwned",14,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","pcarleton","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yZjg2YXM0MEVRM0hKQzVqcFJ5aHZteXUxUjUifQ","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_32":44,"_37":162,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":-5,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":57,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":163,"_79":164,"_81":165,"_83":25},"tree",[153,154],"files",[153,154],"counts",{"_142":143,"_144":61,"_145":61,"_146":147,"_148":149},"contents",[125,126],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":133,"_32":134,"_30":55,"_128":-5,"_40":41,"_39":135,"_129":25,"_37":136,"_13":137,"_33":138,"_34":139,"_24":25,"_131":140,"_27":141},{"_42":127,"_32":28,"_30":31,"_128":-5,"_40":41,"_39":14,"_129":57,"_37":130,"_13":61,"_33":20,"_34":36,"_24":25,"_131":-5,"_27":132},"7e532d3c-7e90-11f0-934e-0224a6c84d84","parentId","latest",["D",1755781950815],"label",[28],"7e3ed7a6-7e90-11f0-bf35-0224a6c84d84","http.ts",11,["D",1755781950685],9,"http","// Browser-based MCP OAuth Client for Val.town\n// This client demonstrates OAuth authentication flow with an MCP server\n\nasync function handleRequest(req: Request): Promise {\n const url = new URL(req.url);\n\n // Handle OAuth callback\n if (url.pathname === '/callback') {\n const code = url.searchParams.get('code');\n const state = url.searchParams.get('state');\n\n return new Response(`\n \n \n \n OAuth Callback\n \n \n \n

Authorization successful!

This window will close automatically...

Code: ${code}

\n \n \n `, {\n headers: { 'Content-Type': 'text/html' }\n });\n }\n\n // Main client page\n return new Response(`\n \n \n \n MCP OAuth Client\n \n \n \n

\n =\u0010 MCP OAuth Client Demo\n Disconnected\n

\n\n

\n MCP Server URL\n \n

\n\n

\n OAuth Callback URL\n \n

\n\n

\n \n \n \n \n

\n\n

\n\n \n \n \n `, {\n headers: { 'Content-Type': 'text/html' }\n });\n}\n\n// For Val Town deployment\nexport default handleRequest;\n\n// For local development\nif (import.meta.main) {\n const port = parseInt(Deno.env.get(\"PORT\") || \"8000\");\n console.log(`Starting OAuth client server on http://localhost:${port}`);\n console.log(`Open your browser to http://localhost:${port} to use the client`);\n\n Deno.serve({ port }, handleRequest);\n}\n","mcp-oauth-client-ex1",[134],"pulls",0,"branches","forks","envVars",{"_150":143,"_152":143},"connections",{"_150":143,"_151":143},"count","unfilledCount","emptyCount",{"_42":133,"_32":134,"_30":55,"_128":-5,"_40":41,"_39":135,"_129":25,"_37":159,"_13":137,"_33":138,"_34":139,"_24":25,"_131":140,"_156":160,"_27":161},{"_42":127,"_32":28,"_30":31,"_128":-5,"_40":41,"_39":14,"_129":57,"_37":155,"_13":61,"_33":20,"_34":36,"_24":25,"_131":-5,"_156":157,"_27":158},["D",1755781950815],"children",[],[28],["D",1755781950685],[],[134],["D",1755767895836],{"_95":94,"_102":98},{"_95":94,"_96":-5,"_97":98,"_18":53,"_99":100,"_101":25},{"_13":84,"_32":85,"_42":41,"_86":43,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":44,"_93":94},"ctx",{"_77":-5,"_122":199,"_200":201,"_202":203,"_204":25,"_205":25,"_206":25,"_207":57,"_208":-5,"_209":-7,"_210":-7,"_211":143,"_212":25,"_213":25,"_214":-5,"_215":25,"_216":25,"_217":25,"_218":-5},"ENV",{"_170":171,"_172":173,"_174":85,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v12