TanTan
2a69b23b47
Dev Build / cleanup (push) Canceled after 0s
Dev Build / typecheck (push) Canceled after 0s
Dev Build / build (linux-arm64, ubuntu-24.04-arm, linux-arm64) (push) Canceled after 0s
Dev Build / build (linux-x64, ubuntu-latest, linux-x64) (push) Canceled after 0s
Dev Build / build (win-x64, windows-latest, win32-x64) (push) Canceled after 0s
Dev Build / dispatch-dev-docker (push) Canceled after 0s
77 lines
3.1 KiB
JavaScript
77 lines
3.1 KiB
JavaScript
#!/usr/bin/env node
|
|
/**
|
|
* Example demonstrating client_credentials grant for machine-to-machine authentication.
|
|
*
|
|
* Supports two authentication methods based on environment variables:
|
|
*
|
|
* 1. client_secret_basic (default):
|
|
* MCP_CLIENT_ID - OAuth client ID (required)
|
|
* MCP_CLIENT_SECRET - OAuth client secret (required)
|
|
*
|
|
* 2. private_key_jwt (when MCP_CLIENT_PRIVATE_KEY_PEM is set):
|
|
* MCP_CLIENT_ID - OAuth client ID (required)
|
|
* MCP_CLIENT_PRIVATE_KEY_PEM - PEM-encoded private key for JWT signing (required)
|
|
* MCP_CLIENT_ALGORITHM - Signing algorithm (default: RS256)
|
|
*
|
|
* Common:
|
|
* MCP_SERVER_URL - Server URL (default: http://localhost:3000/mcp)
|
|
* MCP_EXPECTED_ISSUER - Issuer URL of the authorization server the credentials were registered with (required)
|
|
*/
|
|
import { Client } from '../../client/index.js';
|
|
import { StreamableHTTPClientTransport } from '../../client/streamableHttp.js';
|
|
import { ClientCredentialsProvider, PrivateKeyJwtProvider } from '../../client/auth-extensions.js';
|
|
const DEFAULT_SERVER_URL = process.env.MCP_SERVER_URL || 'http://localhost:3000/mcp';
|
|
function createProvider() {
|
|
const clientId = process.env.MCP_CLIENT_ID;
|
|
if (!clientId) {
|
|
console.error('MCP_CLIENT_ID environment variable is required');
|
|
process.exit(1);
|
|
}
|
|
// The authorization server these credentials were registered with
|
|
const expectedIssuer = process.env.MCP_EXPECTED_ISSUER;
|
|
if (!expectedIssuer) {
|
|
console.error('MCP_EXPECTED_ISSUER environment variable is required');
|
|
process.exit(1);
|
|
}
|
|
// If private key is provided, use private_key_jwt authentication
|
|
const privateKeyPem = process.env.MCP_CLIENT_PRIVATE_KEY_PEM;
|
|
if (privateKeyPem) {
|
|
const algorithm = process.env.MCP_CLIENT_ALGORITHM || 'RS256';
|
|
console.log('Using private_key_jwt authentication');
|
|
return new PrivateKeyJwtProvider({
|
|
clientId,
|
|
privateKey: privateKeyPem,
|
|
algorithm,
|
|
expectedIssuer
|
|
});
|
|
}
|
|
// Otherwise, use client_secret_basic authentication
|
|
const clientSecret = process.env.MCP_CLIENT_SECRET;
|
|
if (!clientSecret) {
|
|
console.error('MCP_CLIENT_SECRET or MCP_CLIENT_PRIVATE_KEY_PEM environment variable is required');
|
|
process.exit(1);
|
|
}
|
|
console.log('Using client_secret_basic authentication');
|
|
return new ClientCredentialsProvider({
|
|
clientId,
|
|
clientSecret,
|
|
expectedIssuer
|
|
});
|
|
}
|
|
async function main() {
|
|
const provider = createProvider();
|
|
const client = new Client({ name: 'client-credentials-example', version: '1.0.0' }, { capabilities: {} });
|
|
const transport = new StreamableHTTPClientTransport(new URL(DEFAULT_SERVER_URL), {
|
|
authProvider: provider
|
|
});
|
|
await client.connect(transport);
|
|
console.log('Connected successfully.');
|
|
const tools = await client.listTools();
|
|
console.log('Available tools:', tools.tools.map(t => t.name).join(', ') || '(none)');
|
|
await transport.close();
|
|
}
|
|
main().catch(err => {
|
|
console.error(err);
|
|
process.exit(1);
|
|
});
|
|
//# sourceMappingURL=simpleClientCredentials.js.map
|