feat: Experimenting with oauth

Author: valekjo

.actor/input_schema.json

@@ -50,6 +50,12 @@
             "prefill": {
             "query": "hello world"
             }
+        },
+        "authorizationServer": {
+            "title": "Authorization server",
+            "type": "string",
+            "description": "Authorization server",
+            "editor": "textfield"
         }
     }
 }

src/actor/const.ts

@@ -8,6 +8,7 @@ export enum Routes {
     MCP = '/mcp',
     SSE = '/sse',
     MESSAGE = '/message',
+    WELL_KNOWN_OAUTH_AUTHORIZATION_SERVER = '/.well-known/oauth-authorization-server',
 }
 
 export const getHelpMessage = (host: string) => `To interact with the server you can either:

src/actor/server.ts

@@ -19,6 +19,7 @@ import { getActorRunData } from './utils.js';
 export function createExpressApp(
     host: string,
     mcpServer: ActorsMcpServer,
+    authorizationServer: string,
 ): express.Express {
     const app = express();
     let transportSSE: SSEServerTransport;
@@ -64,6 +65,13 @@ export function createExpressApp(
         res.status(200).end();
     });
 
+    app.head(Routes.WELL_KNOWN_OAUTH_AUTHORIZATION_SERVER, async (_req: Request, res: Response) => {
+        // The endpoint is the same
+        const response = await fetch(`${authorizationServer}${Routes.WELL_KNOWN_OAUTH_AUTHORIZATION_SERVER}`);
+        const data = await response.json();
+        res.status(200).json(data).end();
+    });
+
     app.get(Routes.SSE, async (req: Request, res: Response) => {
         try {
             log.info(`Received GET message at: ${Routes.SSE}`);

src/main.ts

@@ -35,7 +35,7 @@ if (STANDBY_MODE) {
         enableDefaultActors: false,
     });
 
-    const app = createExpressApp(HOST, mcpServer);
+    const app = createExpressApp(HOST, mcpServer, input.authorizationServer);
     log.info('Actor is running in the STANDBY mode.');
 
     // Load only Actors specified in the input

src/types.ts

@@ -183,6 +183,7 @@ export type Input = {
     maxActorMemoryBytes?: number;
     debugActor?: string;
     debugActorInput?: unknown;
+    authorizationServer?: string;
 };
 
 export interface ToolCacheEntry {