(request: Request, result: McpAuthResult)
| 176 | }); |
| 177 | |
| 178 | const toOutcome = (request: Request, result: McpAuthResult): Effect.Effect<AuthOutcome> => { |
| 179 | if (Predicate.isTagged(result, "Authorized")) { |
| 180 | return finishAuthorized(request, result.token); |
| 181 | } |
| 182 | return annotateMcpRequest(request, { token: null, parseBody: false }).pipe( |
| 183 | Effect.as( |
| 184 | unauthorized( |
| 185 | bearerChallengeFor( |
| 186 | result, |
| 187 | mcpOrganizationFromRequest(request), |
| 188 | toolkitSlugFromRequest(request), |
| 189 | ), |
| 190 | ), |
| 191 | ), |
| 192 | ); |
| 193 | }; |
| 194 | |
| 195 | /** |
| 196 | * Never fails: a transient JWKS-infra failure (the McpJwtVerificationError |
no test coverage detected