saidsurucu
9b43070754
Applied automatic fixes for 315 out of 597 linting errors: - Remove unused imports (F401) - Fix f-string without placeholders (F541) - Split multiple imports (E401) - Remove redundant import aliases Remaining 272 errors are mostly style issues: - 164 E701: Multiple statements on one line (colon) - 70 E402: Module import not at top of file - 13 F841: Unused variables - Various other style warnings Code functionality unchanged - all fixes are cosmetic improvements.
73 lines
2.5 KiB
Python
73 lines
2.5 KiB
Python
"""
|
|
Clerk OAuth configuration for MCP Auth Toolkit
|
|
"""
|
|
|
|
import os
|
|
import logging
|
|
from .oauth import OAuthConfig
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
def create_clerk_oauth_config() -> OAuthConfig:
|
|
"""Create OAuth configuration for Clerk integration using SDK"""
|
|
|
|
# Get Clerk configuration from environment
|
|
clerk_domain = os.getenv("CLERK_DOMAIN", "accounts.yargimcp.com")
|
|
clerk_publishable_key = os.getenv("CLERK_PUBLISHABLE_KEY")
|
|
clerk_secret_key = os.getenv("CLERK_SECRET_KEY")
|
|
|
|
if not clerk_publishable_key or not clerk_secret_key:
|
|
raise ValueError("CLERK_PUBLISHABLE_KEY and CLERK_SECRET_KEY are required")
|
|
|
|
# For Clerk with custom domains, we use our adapter endpoints
|
|
# This allows us to handle the custom domain flow properly
|
|
base_url = os.getenv("BASE_URL", "https://yargimcp.com")
|
|
|
|
config = OAuthConfig(
|
|
client_id=clerk_publishable_key,
|
|
client_secret=clerk_secret_key,
|
|
# Use our adapter endpoints instead of Clerk's direct endpoints
|
|
authorization_endpoint=f"{base_url}/authorize",
|
|
token_endpoint=f"{base_url}/token",
|
|
# Keep Clerk's JWKS for token validation
|
|
jwks_uri=f"https://{clerk_domain}/.well-known/jwks.json",
|
|
issuer=base_url, # We're the issuer for MCP tokens
|
|
scopes=["mcp:tools:read", "mcp:tools:write", "openid", "profile", "email"]
|
|
)
|
|
|
|
logger.info("Created Clerk OAuth config with adapter endpoints")
|
|
logger.info(f"Clerk domain: {clerk_domain}")
|
|
logger.debug(f"Authorization endpoint: {config.authorization_endpoint}")
|
|
logger.debug(f"Token endpoint: {config.token_endpoint}")
|
|
|
|
return config
|
|
|
|
|
|
def get_jwt_secret() -> str:
|
|
"""Get JWT secret for token signing"""
|
|
jwt_secret = os.getenv("JWT_SECRET_KEY")
|
|
|
|
if not jwt_secret:
|
|
raise ValueError("JWT_SECRET_KEY environment variable is required")
|
|
|
|
return jwt_secret
|
|
|
|
|
|
def create_mcp_server_config():
|
|
"""Create complete MCP server configuration for Clerk integration"""
|
|
|
|
try:
|
|
oauth_config = create_clerk_oauth_config()
|
|
jwt_secret = get_jwt_secret()
|
|
|
|
return {
|
|
"oauth_config": oauth_config,
|
|
"jwt_secret": jwt_secret,
|
|
"base_url": os.getenv("BASE_URL", "https://yargi-mcp.fly.dev"),
|
|
"auth_enabled": os.getenv("ENABLE_AUTH", "true").lower() == "true"
|
|
}
|
|
|
|
except Exception as e:
|
|
logger.error(f"Failed to create MCP server config: {e}")
|
|
raise |