(request: Request, result: McpAuthResult)
| 238 | }); |
| 239 | |
| 240 | const toOutcome = (request: Request, result: McpAuthResult): Effect.Effect<AuthOutcome> => { |
| 241 | if (Predicate.isTagged(result, "Authorized")) { |
| 242 | return finishAuthorized(request, result.token); |
| 243 | } |
| 244 | return annotateMcpRequest(request, { |
| 245 | token: null, |
| 246 | parseBody: false, |
| 247 | }).pipe( |
| 248 | Effect.as( |
| 249 | unauthorized( |
| 250 | bearerChallengeFor( |
| 251 | result, |
| 252 | mcpOrganizationFromRequest(request), |
| 253 | toolkitSlugFromRequest(request), |
| 254 | ), |
| 255 | ), |
| 256 | ), |
| 257 | ); |
| 258 | }; |
| 259 | |
| 260 | /** |
| 261 | * Never fails: a transient JWKS-infra failure (the McpJwtVerificationError |
no test coverage detected