Function bearerChallenge

apps/cloud/src/mcp/responses.ts:15–28

(auth: UnauthorizedAuth, protectedResourceMetadataUrl: string)

  `"${value.replaceAll("\\", "\\\\").replaceAll('"', '\\"')}"`;

export const bearerChallenge = (auth: UnauthorizedAuth, protectedResourceMetadataUrl: string) => {
  const params =
    auth.reason === "missing_bearer"
      ? [`resource_metadata=${quoteAuthParam(protectedResourceMetadataUrl)}`]
      : [
          'error="invalid_token"',
          `error_description=${quoteAuthParam(
            auth.description ?? "The access token is invalid or expired",
          )}`,
          `resource_metadata=${quoteAuthParam(protectedResourceMetadataUrl)}`,
        ];

  return `Bearer ${params.join(", ")}`;
};

/**
 * The cloud edge's JSON-RPC error `Response` (CORS-on — it crosses the browser