mcpserver

type HTTPAuth struct {
	Token             string // shared-secret bearer token; empty disables token auth
	TrustProxyHeaders bool   // trust X-MCP-Role/X-MCP-Subject identity headers
	TrustedProxyCIDRs []string
	TLSCert           string
	TLSKey            string
	ClientCA          string // PEM bundle; when set, require+verify a client cert (mTLS)
	// Users resolves configured users; nil means no users are configured.
	// With users, bearer tokens may identify individual users and trusted
	// proxies may send X-MCP-User.
	Users UserDirectory
}

type HTTPConfig struct {
	// HTTPAuth is how callers are authenticated; a reload may replace it
	// (see AuthChanges).
	HTTPAuth
	// Bus runs the server's background tasks; optional.
	Bus               *bus.Bus
	Addr              string
	ReadHeaderTimeout time.Duration
	ReadTimeout       time.Duration
	WriteTimeout      time.Duration
	IdleTimeout       time.Duration
	MaxHeaderBytes    int
	MaxBodyBytes      int64
	Metrics           http.Handler
	SessionTimeout    time.Duration
	OnSessionClosed   func(string)
	// RevokedPrincipals registers a callback receiving users removed or
	// disabled by a reload; their sessions are dropped and rolled back, and
	// the callback returns those sessions.
	RevokedPrincipals func(func([]string) []string)
	// SnapshotReady backs /readyz/snapshot: it returns nil when a
	// configuration snapshot is published and servable. DatabaseReady backs
	// /readyz/db: it returns nil when the configured databases are reachable.
	// Probes fail closed: a nil probe or a probe error yields 503.
	SnapshotReady func(context.Context) error
	DatabaseReady func(context.Context) error
	// Admin, when set, serves /admin/ with its own authentication; MCP bearer
	// tokens do not apply there and admin sessions do not apply to /mcp.
	Admin http.Handler
	// SnapshotStale returns the ID of a published store revision that is not
	// applied (0 when none); it adds X-Snapshot-Stale to /readyz/snapshot.
	SnapshotStale func() int64
	// AuthChanges, when set, receives a function switching to a new
	// authentication while serving, prepared with PrepareHTTPAuth: switching
	// reads no file, so it cannot fail half way. It fails, keeping the
	// current one, only when it would switch TLS on or off.
	AuthChanges func(apply func(PreparedAuth) error)
}

type PreparedAuth struct {
	// contains filtered or unexported fields
}

type UserDirectory interface {
	UserByTokenHash(hash string) (bootstrap.UserIdentity, bool)
	UserByName(name string) (bootstrap.UserIdentity, bool)
}