hzhang/inspector
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add zod parsing for OAuthMetadataSchema and OAuthTokensSchema

Browse Source
This commit is contained in:
Allen Zhou
2025-02-05 12:42:09 -08:00
parent 96ba6fd531
commit 95bbd60a38
1 changed files with 9 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
client/src/lib/auth.ts
View File

@@ -26,10 +26,11 @@ export async function discoverOAuthMetadata(
if (response.ok) { if (response.ok) {
const metadata = await response.json(); const metadata = await response.json();
return { const validatedMetadata = OAuthMetadataSchema.parse({
authorization_endpoint: metadata.authorization_endpoint, authorization_endpoint: metadata.authorization_endpoint,
token_endpoint: metadata.token_endpoint, token_endpoint: metadata.token_endpoint,
}; });
return validatedMetadata;
} }
} catch (error) { } catch (error) {
console.warn("OAuth metadata discovery failed:", error); console.warn("OAuth metadata discovery failed:", error);
@@ -37,10 +38,11 @@ export async function discoverOAuthMetadata(
// Fall back to default endpoints // Fall back to default endpoints
const baseUrl = new URL(serverUrl); const baseUrl = new URL(serverUrl);
return { const defaultMetadata = {
authorization_endpoint: new URL("/authorize", baseUrl).toString(), authorization_endpoint: new URL("/authorize", baseUrl).toString(),
token_endpoint: new URL("/token", baseUrl).toString(), token_endpoint: new URL("/token", baseUrl).toString(),
}; };
return OAuthMetadataSchema.parse(defaultMetadata);
} }
export async function startOAuthFlow(serverUrl: string): Promise<string> { export async function startOAuthFlow(serverUrl: string): Promise<string> {
@@ -98,7 +100,8 @@ export async function handleOAuthCallback(
throw new Error("Token exchange failed"); throw new Error("Token exchange failed");
} }
return await response.json(); const tokens = await response.json();
return OAuthTokensSchema.parse(tokens);
} }
export async function refreshAccessToken( export async function refreshAccessToken(
@@ -126,5 +129,6 @@ export async function refreshAccessToken(
throw new Error("Token refresh failed"); throw new Error("Token refresh failed");
} }
return await response.json(); const tokens = await response.json();
return OAuthTokensSchema.parse(tokens);
} }