Function main

examples/server/auth-middleware/main.go:235–396

()

}

func main() {
	flag.Parse()

	// Create the MCP server.
	server := createMCPServer()

	// Create authentication middleware.
	jwtAuth := auth.RequireBearerToken(verifyJWT, &auth.RequireBearerTokenOptions{
		Scopes:              []string{"read"}, // Require "read" permission
		ResourceMetadataURL: "http://localhost:8080/.well-known/oauth-protected-resource",
	})

	apiKeyAuth := auth.RequireBearerToken(verifyAPIKey, &auth.RequireBearerTokenOptions{
		Scopes: []string{"read"}, // Require "read" permission
	})

	// Create HTTP handler with authentication.
	handler := mcp.NewStreamableHTTPHandler(func(r *http.Request) *mcp.Server {
		return server
	}, nil)

	// Apply authentication middleware to the MCP handler.
	authenticatedHandler := jwtAuth(handler)
	apiKeyHandler := apiKeyAuth(handler)

	// Create router for different authentication methods.
	http.HandleFunc("/mcp/jwt", authenticatedHandler.ServeHTTP)
	http.HandleFunc("/mcp/apikey", apiKeyHandler.ServeHTTP)

	// Add utility endpoints for token generation.
	http.HandleFunc("/generate-token", func(w http.ResponseWriter, r *http.Request) {
		// Get user ID from query parameters (default: "test-user").
		userID := r.URL.Query().Get("user_id")
		if userID == "" {
			userID = "test-user"
		}

		// Get scopes from query parameters (default: ["read", "write"]).
		scopes := strings.Split(r.URL.Query().Get("scopes"), ",")
		if len(scopes) == 1 && scopes[0] == "" {
			scopes = []string{"read", "write"}
		}

		// Get expiration time from query parameters (default: 1 hour).
		expiresIn := 1 * time.Hour
		if expStr := r.URL.Query().Get("expires_in"); expStr != "" {
			if exp, err := time.ParseDuration(expStr); err == nil {
				expiresIn = exp
			}
		}

		// Generate the JWT token.
		token, err := generateToken(userID, scopes, expiresIn)
		if err != nil {
			http.Error(w, "Failed to generate token", http.StatusInternalServerError)
			return
		}