{"version":3,"file":"oauthDiscoveryFallback.mjs","sources":["../../../../src/services/mcp/middleware/oauthDiscoveryFallback.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\n\n/**\n * OAuth discovery paths probed by MCP SDK clients during the authentication\n * fallback flow (RFC 8414 § 3, RFC 7591, OpenID Connect Discovery).\n *\n * Strapi is a resource server, not an authorization server, so these paths\n * have no real handler. Without this middleware, Koa returns plain-text\n * 404/405 responses that crash clients expecting JSON (e.g. Claude Code).\n *\n * The middleware only fires when downstream already returned 404 or 405,\n * so user-defined routes on these paths are never shadowed.\n */\nconst OAUTH_DISCOVERY_PROBES: ReadonlyArray<{ method: string; path: string }> = [\n  { method: 'GET', path: '/.well-known/oauth-authorization-server' },\n  { method: 'GET', path: '/.well-known/openid-configuration' },\n  { method: 'POST', path: '/register' },\n];\n\nexport const createOAuthDiscoveryFallbackMiddleware = (): Core.MiddlewareHandler => {\n  return async (ctx, next) => {\n    await next();\n\n    if (ctx.status !== 404 && ctx.status !== 405) {\n      return;\n    }\n\n    const isOAuthProbe = OAUTH_DISCOVERY_PROBES.some(\n      (probe) => ctx.method === probe.method && ctx.path === probe.path\n    );\n\n    if (isOAuthProbe === false) {\n      return;\n    }\n\n    ctx.status = 404;\n    ctx.set('Content-Type', 'application/json');\n    ctx.body = { error: 'not_found', error_description: 'OAuth is not supported' };\n  };\n};\n"],"names":["OAUTH_DISCOVERY_PROBES","method","path","createOAuthDiscoveryFallbackMiddleware","ctx","next","status","isOAuthProbe","some","probe","set","body","error","error_description"],"mappings":"AAEA;;;;;;;;;;AAUC,IACD,MAAMA,sBAAAA,GAA0E;AAC9E,IAAA;QAAEC,MAAAA,EAAQ,KAAA;QAAOC,IAAAA,EAAM;AAA0C,KAAA;AACjE,IAAA;QAAED,MAAAA,EAAQ,KAAA;QAAOC,IAAAA,EAAM;AAAoC,KAAA;AAC3D,IAAA;QAAED,MAAAA,EAAQ,MAAA;QAAQC,IAAAA,EAAM;AAAY;AACrC,CAAA;MAEYC,sCAAAA,GAAyC,IAAA;AACpD,IAAA,OAAO,OAAOC,GAAAA,EAAKC,IAAAA,GAAAA;QACjB,MAAMA,IAAAA,EAAAA;AAEN,QAAA,IAAID,IAAIE,MAAM,KAAK,OAAOF,GAAAA,CAAIE,MAAM,KAAK,GAAA,EAAK;AAC5C,YAAA;AACF,QAAA;AAEA,QAAA,MAAMC,eAAeP,sBAAAA,CAAuBQ,IAAI,CAC9C,CAACC,QAAUL,GAAAA,CAAIH,MAAM,KAAKQ,KAAAA,CAAMR,MAAM,IAAIG,GAAAA,CAAIF,IAAI,KAAKO,MAAMP,IAAI,CAAA;AAGnE,QAAA,IAAIK,iBAAiB,KAAA,EAAO;AAC1B,YAAA;AACF,QAAA;AAEAH,QAAAA,GAAAA,CAAIE,MAAM,GAAG,GAAA;QACbF,GAAAA,CAAIM,GAAG,CAAC,cAAA,EAAgB,kBAAA,CAAA;AACxBN,QAAAA,GAAAA,CAAIO,IAAI,GAAG;YAAEC,KAAAA,EAAO,WAAA;YAAaC,iBAAAA,EAAmB;AAAyB,SAAA;AAC/E,IAAA,CAAA;AACF;;;;"}