This AS doesn't do `/authorize`

${esc(asUrl)} is an XAA (cross-app access) authorization server. It only supports\ngrant_type=urn:ietf:params:oauth:grant-type:jwt-bearer at\n/token — there's no interactive authorization-code flow.

The authorization_endpoint in our metadata exists only because some client schemas\nrequire the field. If your client redirected you here, it's trying to run a code flow against an\nAS that can't issue codes — check that it's using the jwt-bearer grant.

Request parameters received

\n${rows ? `${rows}

` : `

(none)

`}\n`;\n}\n\nexport function indexPage(opts: {\n role: \"IdP\" | \"AS\" | \"RS\";\n name: string;\n endpoints: { method: string; path: string; note?: string }[];\n}): string {\n const colors = {\n IdP: { bg: \"#fef3c7\", accent: \"#f59e0b\" },\n AS: { bg: \"#dbeafe\", accent: \"#3b82f6\" },\n RS: { bg: \"#d1fae5\", accent: \"#10b981\" },\n }[opts.role];\n\n const rows = opts.endpoints\n .map((e) => {\n const label = `${e.method} ${e.path}`;\n const link = e.method === \"GET\" ? `${label}` : label;\n return `

${link}${e.note ? ` — ${e.note}` : \"\"}

`;\n })\n .join(\"\\n\");\n\n return `\n${opts.name}

${opts.role}

${opts.name}

\n${rows}\n

`;\n}\n",[18,94],"312cdc20-350a-11f1-9f80-42b51c65c3df",["D",1775845331602],"/**\n * Wiring for the XAA demo stack. Client creds are NOT hardcoded — they\n * come from /register (see register.ts). The IdP and AS issue distinct\n * client_ids because each bakes its own issuer into the HMAC input.\n */\n\nexport const OKTA_ISSUER = \"https://integrator-7089468.okta.com\";\n\nexport const DEMO_USER = {\n sub: \"demo@example.com\",\n email: \"demo@example.com\",\n name: \"Demo User\",\n};\n\n// \"Am I on val.town?\" — esm.town serves deployed code\nexport const ON_VALTOWN = import.meta.url.startsWith(\"https://esm.town\");\n\nexport const URLS = ON_VALTOWN\n ? {\n idp: \"https://xaa-mcp-idp.val.run\",\n as: \"https://xaa-mcp-as.val.run\",\n rs: \"https://xaa-mcp-rs.val.run\",\n cal: \"https://xaa-mcp-cal.val.run\",\n as2: \"https://xaa-mcp-as2.val.run\",\n rs2: \"https://xaa-mcp-rs2.val.run\",\n }\n : {\n idp: \"http://localhost:3001\",\n as: \"http://localhost:3002\",\n rs: \"http://localhost:3000\",\n cal: \"http://localhost:3003\",\n as2: \"http://localhost:3005\",\n rs2: \"http://localhost:3004\",\n };\n",[18,70],"pulls","branches","forks","envVars",{"_234":212,"_236":26},"connections",{"_234":26,"_235":26},"count","unfilledCount","emptyCount",{"_39":199,"_13":18,"_68":128,"_49":-5,"_41":42,"_200":46,"_201":24,"_43":265,"_45":26,"_71":129,"_203":-5,"_73":30,"_204":-5,"_250":266,"_17":267},{"_39":223,"_13":70,"_68":69,"_49":128,"_41":42,"_200":114,"_201":24,"_43":262,"_45":212,"_71":72,"_203":225,"_73":30,"_204":-5,"_250":263,"_17":264},{"_39":219,"_13":94,"_68":93,"_49":128,"_41":42,"_200":122,"_201":24,"_43":259,"_45":212,"_71":72,"_203":221,"_73":30,"_204":-5,"_250":260,"_17":261},{"_39":215,"_13":85,"_68":84,"_49":128,"_41":42,"_200":79,"_201":24,"_43":256,"_45":26,"_71":72,"_203":217,"_73":30,"_204":-5,"_250":257,"_17":258},{"_39":210,"_13":103,"_68":102,"_49":128,"_41":42,"_200":106,"_201":24,"_43":253,"_45":212,"_71":72,"_203":213,"_73":30,"_204":-5,"_250":254,"_17":255},{"_39":243,"_13":244,"_68":245,"_49":-5,"_41":42,"_200":164,"_201":24,"_43":246,"_45":247,"_71":248,"_203":249,"_73":30,"_204":14,"_250":251,"_17":252},"bc7a379c-43fa-11f1-9746-42b51c65c3df","http.ts","b25f3774-18a0-11f1-8f13-42dde27851f2",["D",1777487960793],12,"http","import { Hono } from \"npm:hono@3\";\nimport { cors } from \"npm:hono@3/cors\";\nimport * as jose from \"npm:jose@5\";\nimport { URLS } from \"./shared/config.ts\";\nimport { getOrCreateKeypair } from \"./shared/keys.ts\";\nimport { indexPage, xaaAuthorizeStub } from \"./shared/html.ts\";\nimport { deriveAs2Secret, debugCredsAs2 } from \"./shared/register.ts\";\n\nconst JWT_BEARER_GRANT = \"urn:ietf:params:oauth:grant-type:jwt-bearer\";\nconst ID_JAG_TYP = \"oauth-id-jag+jwt\";\n\n// Claude-as-IdP: claude.ai mints its own JAGs (no upstream IdP). There's no\n// OIDC discovery at claude.ai yet, so we take the public key inline via env.\n// Set CLAUDE_AI_JWK to the JSON public JWK (the one matching\n// TOOLBOX_XAA_SIGNING_PRIVATE_KEY, with the same `kid`).\nconst CLAUDE_AI_ISS = \"https://claude.ai\";\nconst CLAUDE_AI_JWK = Deno.env.get(\"CLAUDE_AI_JWK\");\nif (CLAUDE_AI_JWK) {\n // DEBUG: surface what jose will actually see for the claude.ai key.\n // Env var must be a SINGLE JWK (we wrap it in {keys:[...]} at jwksFor).\n try {\n const parsed = JSON.parse(CLAUDE_AI_JWK);\n const k = Array.isArray(parsed.keys) ? parsed.keys[0] : parsed;\n console.log(\"[as2] CLAUDE_AI_JWK parsed:\", {\n kty: k?.kty, crv: k?.crv, alg: k?.alg, kid: k?.kid,\n envVarShape: Array.isArray(parsed.keys) ? \"jwks\" : \"single-jwk\",\n });\n } catch (e) {\n console.error(\"[as2] CLAUDE_AI_JWK is not valid JSON:\", e);\n }\n}\n\nconst kp = await getOrCreateKeypair(\"xaa_as2_signing_key_v1\");\n\n// JWKS resolver per issuer. For claude.ai we use the inline JWK; for\n// everything else we discover via OIDC (demo IdP, Okta, etc).\ntype KeyResolver = ReturnType | ReturnType;\nconst jwksCache = new Map();\nasync function jwksFor(issuer: string): Promise {\n let jwks = jwksCache.get(issuer);\n if (jwks) return jwks;\n if (issuer === CLAUDE_AI_ISS) {\n // Merge the inline env-var key (dev keypair) with the published toolbox\n // JWKS so JAGs from either signer verify.\n const keys: jose.JWK[] = [];\n if (CLAUDE_AI_JWK) {\n const parsed = JSON.parse(CLAUDE_AI_JWK);\n keys.push(...(Array.isArray(parsed.keys) ? parsed.keys : [parsed]));\n }\n for (const url of [\n \"https://claude.ai/v1/mcp/jwks\",\n \"https://claude-ai.staging.ant.dev/v1/mcp/jwks\",\n ]) {\n try {\n const remote = await fetch(url).then((r) => r.json());\n if (Array.isArray(remote.keys)) keys.push(...remote.keys);\n } catch (e) {\n console.error(`[as2] failed to fetch ${url}:`, e);\n }\n }\n console.log(\"[as2] claude.ai key set:\", keys.map((k) => ({ kid: k.kid, kty: k.kty, alg: k.alg })));\n jwks = jose.createLocalJWKSet({ keys });\n } else {\n const res = await fetch(`${issuer}/.well-known/openid-configuration`);\n if (!res.ok) throw new Error(`OIDC discovery failed for ${issuer}: HTTP ${res.status}`);\n const { jwks_uri } = await res.json();\n if (!jwks_uri) throw new Error(`${issuer} OIDC config missing jwks_uri`);\n jwks = jose.createRemoteJWKSet(new URL(jwks_uri));\n }\n jwksCache.set(issuer, jwks);\n return jwks;\n}\n\nconst app = new Hono();\napp.use(\"*\", cors({\n origin: \"*\",\n allowMethods: [\"GET\", \"POST\", \"OPTIONS\"],\n allowHeaders: [\"Content-Type\", \"Authorization\", \"mcp-protocol-version\"],\n}));\n\n// ─── Metadata + JWKS ────────────────────────────────────────────────────────\n\napp.get(\"/.well-known/oauth-authorization-server\", (c) =>\n c.json({\n issuer: URLS.as2,\n token_endpoint: `${URLS.as2}/token`,\n authorization_endpoint: `${URLS.as2}/authorize`, // informational stub — SDK Zod wants the field, XAA never uses it\n registration_endpoint: `${URLS.as2}/register`,\n response_types_supported: [\"code\"],\n grant_types_supported: [JWT_BEARER_GRANT],\n token_endpoint_auth_methods_supported: [\"client_secret_basic\", \"client_secret_post\"],\n }));\n\napp.get(\"/.well-known/jwks.json\", (c) => c.json({ keys: [kp.publicJwk] }));\n\napp.get(\"/authorize\", (c) => c.html(xaaAuthorizeStub(URLS.as2, c.req.query()), 400));\n\n// ─── /register — bring your own client_id ───────────────────────────────────\n// You bring the client_id your IdP will stamp in the JAG (for Okta: the\n// resource app's Okta-issued id; for the demo IdP: your idp_id_...). We give\n// you back a secret bound to (idp_issuer, that_client_id, resource). The\n// secret IS the trust decision — at /token we re-derive it from the JAG's\n// iss + client_id + resource and it has to match.\n\nconst RESOURCES = [`${URLS.rs2}/mcp`];\n\napp.get(\"/register\", (c) =>\n c.html(`Register — AS2\n\n

Register at AS2

You bring the client_id — whatever your IdP stamps in the JAG's client_id claim. For Okta that's the resource app's Okta client_id (e.g. 0oa10m6h81mEkTVXn698). For the demo IdP it's your idp_id_....

We bind a secret to (idp_issuer, client_id, resource). At /token we re-derive the secret from the JAG claims — that's the trust gate. No separate issuer allowlist.

\n`));\n\napp.post(\"/register\", async (c) => {\n const contentType = c.req.header(\"Content-Type\") ?? \"\";\n\n // RFC 7591 DCR (JSON) — toolbox hits this via get_or_register_client_credentials.\n // We don't know the issuer or resource from a standard DCR body, so assume\n // claude.ai + the single RS we front. The derived secret is stateless and\n // will re-derive identically at /token from (JAG.iss, client_id, body.resource).\n if (contentType.includes(\"application/json\")) {\n const body = await c.req.json(); // consume + ignore body (redirect_uris, grant_types, etc.)\n const clientId = `claude_${crypto.randomUUID().slice(0, 12)}`;\n const resource = RESOURCES[0];\n const clientSecret = await deriveAs2Secret(CLAUDE_AI_ISS, clientId, resource);\n return c.json({\n client_id: clientId,\n client_secret: clientSecret,\n client_id_issued_at: Math.floor(Date.now() / 1000),\n grant_types: [JWT_BEARER_GRANT],\n redirect_uris: body.redirect_uris ?? [],\n token_endpoint_auth_method: \"client_secret_post\",\n // echoed so the caller can sanity-check the binding if they care\n _issuer_binding: CLAUDE_AI_ISS,\n _resource_binding: resource,\n }, 201);\n }\n\n // Form POST — manual registration (Okta / demo-IdP path)\n const body = await c.req.parseBody();\n const idpIssuer = (body.idp_issuer as string)?.replace(/\\/$/, \"\");\n const jagClientId = body.jag_client_id as string;\n const resource = body.resource as string;\n if (!idpIssuer || !jagClientId || !resource) {\n return c.json({ error: \"invalid_request\", error_description: \"idp_issuer, jag_client_id, resource required\" }, 400);\n }\n const client_secret = await deriveAs2Secret(idpIssuer, jagClientId, resource);\n return c.json({ client_id: jagClientId, client_secret, idp_issuer: idpIssuer, resource });\n});\n\n// ─── /token — jwt-bearer ────────────────────────────────────────────────────\n// The secret IS the trust decision. Re-derive from JAG.iss + authenticating\n// client_id + resource; if the presented secret matches, you registered for\n// exactly this tuple. Then verify the JAG sig against that issuer's JWKS.\n\napp.post(\"/token\", async (c) => {\n const body = await c.req.parseBody();\n if (body.grant_type !== JWT_BEARER_GRANT) {\n return c.json({ error: \"unsupported_grant_type\", error_description: String(body.grant_type) }, 400);\n }\n\n let clientId: string | undefined, clientSecret: string | undefined;\n const authz = c.req.header(\"Authorization\");\n if (authz?.startsWith(\"Basic \")) {\n const decoded = atob(authz.slice(6));\n const sep = decoded.indexOf(\":\");\n clientId = decodeURIComponent(decoded.slice(0, sep));\n clientSecret = decodeURIComponent(decoded.slice(sep + 1));\n } else {\n clientId = body.client_id as string;\n clientSecret = body.client_secret as string;\n }\n if (!clientId || !clientSecret) {\n return c.json({ error: \"invalid_client\", error_description: \"missing client credentials\" }, 401);\n }\n console.log(\"[as2] /token client auth:\", {\n via: authz?.startsWith(\"Basic \") ? \"basic\" : \"body\",\n client_id: clientId,\n secret_prefix: clientSecret.slice(0, 12) + \"…\",\n body_resource: body.resource,\n });\n\n const assertion = body.assertion as string;\n if (!assertion) {\n return c.json({ error: \"invalid_request\", error_description: \"missing assertion\" }, 400);\n }\n\n // Spec draft says `typ: oauth-id-jag+jwt`. Okta sets it. PyJWT (toolbox)\n // defaults to `typ: JWT` — neither wrong per RFC 7523. Accept either or absent.\n const header = jose.decodeProtectedHeader(assertion);\n if (header.typ && header.typ !== ID_JAG_TYP && header.typ.toLowerCase() !== \"jwt\") {\n return c.json({ error: \"invalid_grant\", error_description: `typ must be ${ID_JAG_TYP} or JWT, got ${header.typ}` }, 400);\n }\n\n // Unsafe decode — sig verified below, AFTER the secret check proves we\n // trust this issuer for this client.\n const unverified = jose.decodeJwt(assertion);\n console.log(\"[as2] /token ID-JAG claims:\", { header: { typ: header.typ, alg: header.alg, kid: header.kid }, payload: unverified });\n const iss = (unverified.iss ?? \"\").replace(/\\/$/, \"\");\n if (!iss) {\n return c.json({ error: \"invalid_grant\", error_description: \"ID-JAG missing iss\" }, 400);\n }\n // Spec §3.1: `resource` in the JAG is OPTIONAL. Okta may omit it.\n // Fall back to the RFC 8707 request param — CC always sends it.\n const jagResource = (unverified.resource as string | undefined) ?? (body.resource as string | undefined);\n if (!jagResource) {\n return c.json({ error: \"invalid_grant\", error_description: \"no resource: ID-JAG omits the claim and request lacks the parameter\" }, 400);\n }\n\n // Spec binding — JAG says it's for client_id X, you must be authing as X.\n // Cheap check; do it before crypto.\n if (unverified.client_id !== clientId) {\n return c.json({\n error: \"invalid_grant\",\n error_description: `ID-JAG client_id (${unverified.client_id}) != authenticating client (${clientId})`,\n }, 400);\n }\n\n // Trust gate. Re-derive the secret from (JAG.iss, clientId, resource).\n // A match means: you registered for exactly this tuple. That's our ACL.\n if (clientSecret !== await deriveAs2Secret(iss, clientId, jagResource)) {\n return c.json({\n error: \"invalid_client\",\n error_description: `secret not bound to (iss=${iss}, client_id, resource). Register at ${URLS.as2}/register`,\n }, 401);\n }\n\n // Now we trust `iss` enough to fetch its keys.\n let claims: jose.JWTPayload;\n try {\n const { payload } = await jose.jwtVerify(assertion, await jwksFor(iss), {\n issuer: iss,\n // RFC 7523 §3 says token-endpoint URL MAY be the aud. Okta uses the\n // issuer URL; toolbox uses the token endpoint. Accept both.\n audience: [URLS.as2, `${URLS.as2}/`, `${URLS.as2}/token`],\n clockTolerance: 30,\n });\n claims = payload;\n } catch (e) {\n // DEBUG: jose errors are terse — log header vs configured-key so kid/alg\n // mismatches and double-wrapped JWKS are obvious in the val logs.\n let cfg: unknown;\n try { cfg = CLAUDE_AI_JWK ? JSON.parse(CLAUDE_AI_JWK) : undefined; } catch { cfg = \"\"; }\n console.error(\"[as2] ID-JAG verify failed\", {\n iss,\n tokenHeader: header, // alg + kid the token was signed with\n configuredClaudeJwk: iss === CLAUDE_AI_ISS ? cfg : \"\",\n err: { name: (e as Error)?.name, code: (e as { code?: string })?.code, message: (e as Error)?.message },\n });\n return c.json({ error: \"invalid_grant\", error_description: `ID-JAG verify failed (iss=${iss}): ${e instanceof Error ? e.message : e}` }, 400);\n }\n\n const accessToken = await new jose.SignJWT({})\n .setProtectedHeader({ alg: \"ES256\", kid: kp.kid })\n .setIssuer(URLS.as2)\n .setAudience(jagResource)\n .setSubject(claims.sub!)\n .setIssuedAt()\n .setExpirationTime(\"1h\")\n .sign(kp.privateKey);\n\n return c.json({ access_token: accessToken, token_type: \"Bearer\", expires_in: 3600 });\n});\n\n// ─── Debug — demo-IdP path only (can't mint Okta id_tokens) ─────────────────\n\napp.get(\"/debug/context\", async (c) => {\n const idToken = await fetch(`${URLS.idp}/debug/mint-id-token`).then((r) => r.text());\n const { idp, as } = await debugCredsAs2();\n return c.json({\n client_id: as.client_id,\n client_secret: as.client_secret,\n idp_client_id: idp.client_id,\n idp_client_secret: idp.client_secret,\n idp_id_token: idToken,\n idp_token_endpoint: `${URLS.idp}/token`,\n });\n});\n\n// ─── Index ──────────────────────────────────────────────────────────────────\n\napp.get(\"/\", (c) =>\n c.html(indexPage({\n role: \"AS\",\n name: \"xaa-mcp-as2\",\n endpoints: [\n { method: \"GET\", path: \"/.well-known/oauth-authorization-server\" },\n { method: \"GET\", path: \"/.well-known/jwks.json\" },\n { method: \"GET\", path: \"/authorize\", note: \"stub — XAA is jwt-bearer only\" },\n { method: \"GET\", path: \"/register\", note: \"bring your own client_id; we bind a secret to (iss, id, resource)\" },\n { method: \"POST\", path: \"/token\", note: \"jwt-bearer; secret-as-trust, no static issuer list\" },\n { method: \"GET\", path: \"/debug/context\", note: \"conformance ctx (demo-IdP path)\" },\n ],\n })));\n\napp.onError((err) => { throw err; });\n\nexport default app.fetch;\nif (import.meta.main) Deno.serve({ port: 3005 }, app.fetch);\n","children",[],[244],["D",1772722161027],[],[18,103],["D",1772721389884],[],[18,85],["D",1776093916216],[],[18,94],["D",1775845331602],[],[18,70],["D",1772721389556],[238,239,240,241],[18],["D",1772721388727],{"_11":12,"_177":76},{"_11":12,"_173":-5,"_75":76,"_31":74,"_174":175,"_176":30},{"_45":164,"_13":16,"_39":42,"_165":131,"_166":-5,"_167":-5,"_168":-5,"_169":-5,"_170":-5,"_171":14,"_172":12},"ctx",{"_58":-5,"_196":305,"_306":307,"_308":309,"_310":30,"_311":30,"_312":30,"_313":24,"_314":-5,"_315":-7,"_316":-7,"_317":26,"_318":30,"_319":30,"_320":-5,"_321":30,"_322":30,"_323":30,"_324":-5},"ENV",{"_276":277,"_278":279,"_280":16,"_281":282,"_283":284,"_285":286,"_287":288,"_289":290,"_291":292,"_293":294,"_295":296,"_297":298,"_299":300,"_301":302,"_303":304},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

This AS doesn't do /authorize

Request parameters received

${opts.name}

Register at AS2

This AS doesn't do `/authorize`

History · shared