auth

func ClientID ¶

func ClientID(clientID, issuer string) (string, error)

ClientID returns the client ID for the given issuer. If clientID is not empty, it is returned. If issuer is empty, it defaults to defaultIssuer. If issuer is unknown, ErrClientIDNotFound is returned.

func Config ¶

func Config(baseURL, clientID string) (*oauth2.Config, error)

Config creates an OAuth2 config for the GitLab instance at baseURL. If baseURL is empty, it defaults to gitlab.com.

func FileTokenSource ¶

func FileTokenSource(ctx context.Context, issuer, filename string, config *oauth2.Config) oauth2.TokenSource

FileTokenSource returns an oauth2.TokenSource that is backed by a file on the file system. The token is refreshed automatically. New tokens are automatically written to the file.

func StoreToken ¶

func StoreToken(filename, issuer string, token *oauth2.Token, options ...storeTokenOption) error

StoreToken writes the provided token to the specified file.

func TokenPath ¶

func TokenPath() string

TokenPath returns the path of the token file based on the operating system:

- Mac OS: `~/Library/Application Support/gitlab-mcp/token.json` - Linux: `~/.config/gitlab-mcp/token.json` - Windows: `%APPDATA%\gitlab-mcp\token.json` - Other: `~/.gitlab-mcp/token.json`

func Wrap ¶ added in v1.23.0

func Wrap(hndl http.Handler) http.Handler

Wrap wraps an HTTP handler to check for the presence of a "Private-Token" header. If the header is present, the request is passed to the wrapped handler. Otherwise, a 401 Unauthorized status is returned.