add back compat test

Author: pcarleton

src/scenarios/client/auth/helpers/serverLifecycle.ts

@@ -5,6 +5,11 @@ export class ServerLifecycle {
   private httpServer: any = null;
   private baseUrl: string = '';
 
+  // Arrow function to avoid needing lots of .bind(this)
+  getUrl = (): string => {
+    return this.baseUrl;
+  };
+
   async start(app: express.Application): Promise<string> {
     this.app = app;
     this.httpServer = this.app.listen(0);
@@ -23,8 +28,4 @@ export class ServerLifecycle {
     }
     this.app = null;
   }
-
-  getUrl(): string {
-    return this.baseUrl;
-  }
 }

src/scenarios/client/auth/march-spec-backcompat.ts

@@ -0,0 +1,107 @@
+import type { Scenario, ConformanceCheck } from '../../../types.js';
+import { ScenarioUrls } from '../../../types.js';
+import { createAuthServer } from './helpers/createAuthServer.js';
+import { createServer } from './helpers/createServer.js';
+import { ServerLifecycle } from './helpers/serverLifecycle.js';
+import { Request, Response } from 'express';
+
+export class AuthMarchSpecBackcompatScenario implements Scenario {
+  name = 'auth/march-spec-backcompat';
+  description =
+    'Tests March 2024 spec OAuth flow: no PRM (Protected Resource Metadata), OAuth metadata at root location';
+  private server = new ServerLifecycle();
+  private checks: ConformanceCheck[] = [];
+
+  async start(): Promise<ScenarioUrls> {
+    this.checks = [];
+
+    // Legacy server, so we create the auth server endpoints on the
+    // same URL as the main server (rather than separating AS / RS).
+    const authApp = createAuthServer(this.checks, this.server.getUrl);
+    const app = createServer(
+      this.checks,
+      this.server.getUrl,
+      this.server.getUrl
+    );
+    app.use(authApp);
+
+    app.get(
+      '/.well-known/oauth-protected-resource',
+      (req: Request, res: Response) => {
+        this.checks.push({
+          id: 'no-prm-root',
+          name: 'No PRM at Root',
+          description:
+            'Client attempted to fetch PRM at root location, but March spec does not have PRM',
+          status: 'SUCCESS',
+          timestamp: new Date().toISOString(),
+          details: {
+            url: req.url,
+            path: req.path,
+            note: 'March spec behavior: no PRM available'
+          }
+        });
+
+        res.status(404).json({
+          error: 'not_found',
+          error_description: 'PRM not available (March spec behavior)'
+        });
+      }
+    );
+
+    app.get(
+      '/.well-known/oauth-protected-resource/mcp',
+      (req: Request, res: Response) => {
+        this.checks.push({
+          id: 'no-prm-path',
+          name: 'No PRM at Path',
+          description:
+            'Client attempted to fetch PRM at path-based location, but March spec behavior does not have PRM',
+          status: 'SUCCESS',
+          timestamp: new Date().toISOString(),
+          details: {
+            url: req.url,
+            path: req.path,
+            note: 'March spec behavior: no PRM available'
+          }
+        });
+
+        res.status(404).json({
+          error: 'not_found',
+          error_description: 'PRM not available (March spec behavior)'
+        });
+      }
+    );
+
+    await this.server.start(app);
+
+    return { serverUrl: `${this.server.getUrl()}/mcp` };
+  }
+
+  async stop() {
+    await this.server.stop();
+  }
+
+  getChecks(): ConformanceCheck[] {
+    const expectedSlugs = [
+      'authorization-server-metadata',
+      'client-registration',
+      'authorization-request',
+      'token-request'
+    ];
+
+    for (const slug of expectedSlugs) {
+      if (!this.checks.find((c) => c.id === slug)) {
+        this.checks.push({
+          id: slug,
+          name: `Expected Check Missing: ${slug}`,
+          description: `Expected Check Missing: ${slug}`,
+          status: 'FAILURE',
+          timestamp: new Date().toISOString()
+        });
+      }
+    }
+
+    return this.checks;
+  }
+}

src/scenarios/index.ts

@@ -3,6 +3,7 @@ import { InitializeScenario } from './client/initialize.js';
 import { ToolsCallScenario } from './client/tools_call.js';
 import { AuthBasicDCRScenario } from './client/auth/basic-dcr.js';
 import { AuthBasicMetadataVar1Scenario } from './client/auth/basic-metadata-var1.js';
+import { AuthMarchSpecBackcompatScenario } from './client/auth/march-spec-backcompat.js';
 import { ElicitationClientDefaultsScenario } from './client/elicitation-defaults.js';
 
 // Import all new server test scenarios
@@ -117,6 +118,7 @@ const scenariosList: Scenario[] = [
   new ToolsCallScenario(),
   new AuthBasicDCRScenario(),
   new AuthBasicMetadataVar1Scenario(),
+  new AuthMarchSpecBackcompatScenario(),
   new ElicitationClientDefaultsScenario()
 ];