Plug-and-play MCP 服务器认证

确实只需几行代码

const server = new McpServer(/* ... */);
const resourceIdentifier = 'https://api.example.com';

const authServerConfig = await fetchServerConfig('<auth-server-url>', { type: 'oidc' });

const mcpAuth = new MCPAuth({
  protectedResources: {
    metadata: {
      resource: resourceIdentifier,
      authorizationServers: [authServerConfig],
      scopesSupported: ['read', 'write'],
    },
  },
});

const app = express();

app.use(mcpAuth.protectedResourceMetadataRouter());

app.use(
  mcpAuth.bearerAuth('jwt', {
    resource: resourceIdentifier,
    audience: resourceIdentifier,
    requiredScopes: ['read', 'write'],
  })
);

server.registerTool(
  'whoami',
  {
    description: 'Returns the current user info',
    inputSchema: {},
  },
  ({ authInfo }) => {
    return authInfo.claims;
  }
);