kKjfndZddlmZddlZddlmZddlmZm Z m Z ddl m Z e e ZGddeZy) uEnhanced authentication middleware with better error messages. This module provides enhanced versions of MCP SDK authentication middleware that return more helpful error messages for developers troubleshooting authentication issues. Implements RFC 6750 §3.1 compliance by distinguishing between missing authentication (no error attribute) and invalid authentication (with error). ) annotationsN)RequireAuthMiddleware)ReceiveScopeSend) get_loggercXeZdZdZ dfd ZddZ ddZxZS)ruEnhanced authentication middleware with detailed error messages. Extends the SDK's RequireAuthMiddleware to provide more actionable error messages when authentication fails. This helps developers understand what went wrong and how to fix it. Also implements RFC 6750 §3.1 compliance by distinguishing between missing authentication (initial discovery) and invalid authentication (token validation failure). cK|ddk7r|j|||d{y|jdg}td|D}|s|j|d{yt||||d{y7_7!7 w)uProcess ASGI scope, distinguishing missing vs invalid auth. Per RFC 6750 §3.1: - Missing auth (no Authorization header) → 401 without error attribute - Invalid auth (Authorization header present) → 401 with error attribute This ensures OAuth flow initialization works correctly in MCP clients during initial discovery phase. Args: scope: ASGI scope receive: ASGI receive callable send: ASGI send callable typehttpNheadersc3HK|]}|djdk(yw)rs authorizationN)lower).0headers o/Users/ahmed/devFolder/Ultron/claude-voice/.venv/lib/python3.12/site-packages/fastmcp/server/auth/middleware.py z1RequireAuthMiddleware.__call__..?s% @GfF1IOO !1 1s ")appgetany_send_missing_authsuper__call__)selfscopereceivesendr has_auth_header __class__s rrzRequireAuthMiddleware.__call__%s( =F "((5'40 0 0 ))Ir* @G  ))$/ / / gugt444! 1 0 5s3BB?B"B#B<B=BBBc:Kg}|jr|jd|jd|rddj|znd}|dddd |jfgd d {|d d dd {tj dy 7-7w)uSend 401 response for missing authentication (RFC 6750 §3.1 compliant). When a request lacks any authentication information, per RFC 6750 §3.1: "If the request lacks any authentication information, the error attribute SHOULD NOT be included." This allows MCP clients to properly initiate OAuth flow during initial discovery phase. Args: send: ASGI send callable resource_metadata=""Bearer , Bearerhttp.response.start)content-length0www-authenticater statusr Nhttp.response.bodyr bodyuIMissing auth: sent 401 without error attribute (RFC 6750 §3.1 compliant))resource_metadata_urlappendjoinencodeloggerdebug)rrwww_auth_partswww_authenticates rrz(RequireAuthMiddleware._send_missing_authLs  % %  ! !$78R8R7SST"U V8FY>2 28 --(*:*A*A*CD   0#>??? W   @s$A'B)B*B<B=BBc  K|}|dk(r|dk(rd}n|dk(r d|dd|dg}|jr|jd|jdd d j|}||d }tj|j } |d |d dt t| j fd|j fgdd{|d| dd{tjd||y7/7w)aSend an authentication error response with enhanced error messages. Overrides the SDK's _send_auth_error to provide more detailed error descriptions that help developers troubleshoot authentication issues. Args: send: ASGI send callable status_code: HTTP status code (401 or 403) error: OAuth error code description: Base error description invalid_tokenr'zAuthentication failed. The provided bearer token is invalid, expired, or no longer recognized by the server. To resolve: clear authentication tokens in your MCP client and reconnect. Your client should automatically re-register and obtain new tokens.insufficient_scopezerror="r"zerror_description="r!r#r$)errorerror_descriptionr&)s content-typesapplication/jsonr(r*r+Nr-r/z#Auth error returned: %s (status=%d)) r1r2r3jsondumpsr4strlenr5info) rr status_coder< descriptionenhanced_descriptionr7r8r0 body_bytess r_send_auth_errorz&RequireAuthMiddleware._send_auth_errorqsQ + O # s(:V ! * * eWA !"6!7q 9   % %  ! !$78R8R7SST"U V$TYY~%>$?@5IJZZ%,,. -%:&C O(<(C(C(EF(*:*A*A*CD   ,"      1   '  s$C DC?D"D#DD)rrrrrrreturnNone)rrrHrI) rrrCintr<r@rDr@rHrI)__name__ __module__ __qualname____doc__rrrG __classcell__)rs@rrrsm %5%5%5 %5  %5N# JB B '*B 36B EHB B r.r)rN __future__rr>&mcp.server.auth.middleware.bearer_authrSDKRequireAuthMiddlewarestarlette.typesrrrfastmcp.utilities.loggingrrKr5r.rrVs;# 100 H Z 4Z r.