Merge pull request #2 from agentic-community/feature-agent-m2m-auth

Feature agent m2m auth

Author: aarora79

.gitignore

@@ -132,6 +132,8 @@ celerybeat.pid
 
 # Environments
 .env
+.env.user
+.env.agent
 .env.docker
 .venv
 env/

Dockerfile

@@ -5,10 +5,11 @@ FROM python:3.12-slim
 ENV PYTHONUNBUFFERED=1 \
     DEBIAN_FRONTEND=noninteractive
 
-# Install minimal system dependencies needed for the container to function
-# All Python-related setup moved to entrypoint.sh for a more lightweight image
+# Install system dependencies including nginx with lua module
 RUN apt-get update && apt-get install -y --no-install-recommends \
     nginx \
+    nginx-extras \
+    lua-cjson \
     curl \
     procps \
     openssl \
@@ -28,7 +29,6 @@ COPY . /app/
 # Note: We copy it here so it's part of the image layer
 COPY docker/nginx_rev_proxy.conf /app/docker/nginx_rev_proxy.conf
 
-
 # Make the entrypoint script executable
 COPY docker/entrypoint.sh /app/docker/entrypoint.sh
 RUN chmod +x /app/docker/entrypoint.sh
@@ -48,5 +48,9 @@ ENV ADMIN_USER=$ADMIN_USER
 ENV ADMIN_PASSWORD=$ADMIN_PASSWORD
 ENV POLYGON_API_KEY=$POLYGON_API_KEY
 
+# Add health check using the new HTTP endpoint
+HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \
+    CMD curl -f http://localhost:7860/health || exit 1
+
 # Run the entrypoint script when the container launches
 ENTRYPOINT ["/app/docker/entrypoint.sh"]

README.md

@@ -184,7 +184,7 @@ The Gateway and the Registry are available as a Docker container. The package in
     export POLYGON_API_KEY=your-polygon-api-key
     # stop any previous instance
     docker stop mcp-gateway-container && docker rm mcp-gateway-container 
-    docker run -p 80:80 -p 443:443 -p 7860:7860 \
+    docker run -p 80:80 -p 443:443 -p 7860:7860 -p 8888:8888 \
     -e ADMIN_USER=$ADMIN_USER \
     -e ADMIN_PASSWORD=$ADMIN_PASSWORD \
     -e POLYGON_API_KEY=$POLYGON_API_KEY \
@@ -262,7 +262,7 @@ The Gateway and the Registry are available as a Docker container. The package in
 1. Run the container with the `-v` switch to map the local folder containing the cert and the private key to the container. Replace `/path/to/certs/` and `/path/private` as appropriate in the command provided below.
 
     ```bash
-    docker run -p 80:80 -p 443:443 -p 7860:7860 \
+    docker run -p 80:80 -p 443:443 -p 7860:7860 -p 8888:8888 \
       -e ADMIN_USER=$ADMIN_USER \
       -e ADMIN_PASSWORD=$ADMIN_PASSWORD \
       -e POLYGON_API_KEY=$POLYGON_API_KEY \

agents/.env.template

@@ -0,0 +1,22 @@
+# Cognito Authentication Configuration
+# Copy this file to .env and fill in your actual values
+
+# Cognito App Client ID
+COGNITO_CLIENT_ID=your_cognito_client_id_here
+
+# Cognito App Client Secret
+COGNITO_CLIENT_SECRET=your_cognito_client_secret_here
+
+# Cognito User Pool ID
+COGNITO_USER_POOL_ID=your_cognito_user_pool_id_here
+
+# AWS Region for Cognito
+AWS_REGION=us-east-1
+
+# Cognito Domain (without https:// prefix, just the domain name)
+# Example: mcp-gateway or your-custom-domain
+# COGNITO_DOMAIN=
+
+# Secret key for session cookie signing (must match registry SECRET_KEY), string of hex characters
+# To generate: python -c 'import secrets; print(secrets.token_hex(32))'
+SECRET_KEY=your-secret-key-here

agents/agent.py

@@ -153,8 +153,12 @@ def load_system_prompt():
     Returns:
         str: The system prompt template
     """
+    import os
     try:
-        with open("agents/system_prompt.txt", "r") as f:
+        # Get the directory where this Python file is located
+        current_dir = os.path.dirname(__file__)
+        system_prompt_path = os.path.join(current_dir, "system_prompt.txt")
+        with open(system_prompt_path, "r") as f:
             return f.read()
     except Exception as e:
         print(f"Error loading system prompt: {e}")
@@ -297,7 +301,11 @@ async def main():
         system_prompt_template = load_system_prompt()
         system_prompt = system_prompt_template.format(
             current_utc_time=current_utc_time,
-            mcp_registry_url=args.mcp_registry_url
+            mcp_registry_url=args.mcp_registry_url,
+            auth_token="",
+            user_pool_id="",
+            client_id="",
+            region=""
         )
 
         # Format the message with system message first