feat: lazy authentication in mcp server

.env.sample

@@ -143,6 +143,10 @@ PLAYWRIGHT_TEST_PASSWORD=
 # ==== MCP Settings ====
 # NUXT_APP_MCP_SERVER_URL=https://localhost:8080/mcp/
 # NUXT_APP_MCP_SERVER_TRACE=1
+# NUXT_APP_MCP_KEYCLOAK_CLIENT_ID=mcp-registration-service
+# NUXT_APP_MCP_KEYCLOAK_CLIENT_SECRET=XXXXXXXXXXX
+# NUXT_PUBLIC_APP_MCP_ALLOWED_HOSTS='claude.ai|claude.com|localhost|127.0.0.1|perplexity.ai|www.perplexity.ai|enterprise.perplexity.ai'
+
 
 # ==== SORBOBOT (optional) Settings ====
 # NUXT_APP_SORBOBOT_API_TOKEN=YOUR_API_TOKEN_HERE

k8s/projects-frontend/secrets.dev.yaml

@@ -18,6 +18,8 @@ config:
         NUXT_APP_CHATBOT_PROMPT_DB: ENC[AES256_GCM,data:d8f0AH3px8XODQlDseqNWCPb/B/xVkWaPqKP/8/DXfCluYXuFqNH1vGi200O9/HxPYRKXScwPjEDQFOzlROPWIrpSRaFo+lYPqxHmx3N2fa0UtFdAisz+xKrzHZrKfnxEgo53uARkeKB0rU0OuU4TBYK8GFk0clesPhAXQ+0RjelldU0V8ylf0pe3Jn1KrBuLo13KrzyS0/na9w=,iv:1gyZ7lRtMksaZqpxVKxSJxY+Ay7F/22XI+qKvbTakik=,tag:tipbXLd7oLT/1VO9ltqNmA==,type:str]
         LANGSMITH_ENDPOINT: ENC[AES256_GCM,data:gfghYyHd7cSoMH49Htgf+8QsQyMcrxRjFUujRt9q6xuGXg==,iv:ufLAHX19mT59zljjYOs2CzjjxPWHQS5xJw1jJqi3hQY=,tag:PgByiy2V0DT/canWw4rcoA==,type:str]
         LANGSMITH_API_KEY: ENC[AES256_GCM,data:qooj4kGWd4hDlBcRVkGfPT9T0t5jJMbXOjcNtnIIfYXW7Kiv4W9BiCYoqrzPazOY9dWF,iv:K5h60KXlcNCH9JdeEy9CAqmOPumhLn6idC8dS/4bQTU=,tag:TfKVvLpdJYUhSoFW1iWQ3A==,type:str]
+        NUXT_APP_MCP_KEYCLOAK_CLIENT_ID: ENC[AES256_GCM,data:F7XySKsufW7hLdSQwrXgfez3u5CRjiEl,iv:fsq7NjUUi/NNOApgsUJu5B5xm7prFGIg1o9YC5gkWD8=,tag:GvzwK1+2o85phVEbwhp01w==,type:str]
+        NUXT_APP_MCP_KEYCLOAK_CLIENT_SECRET: ENC[AES256_GCM,data:AQrQdFC1zxCk7/JsYdMQdlTTKKi1vozsOm9wChXTO31WDDAxNdofJYGLZpO562D1GaCXYTOF/UliIO9Pp1XHM0P9YoRNuf4hvLkJy27I/Y/qBQQUqbM=,iv:nLYuEnG/PXQygZolHMaoCWEw0BMmxHjF9KDj1IWzoko=,tag:d7shs68kCveWJuOdQnOy7Q==,type:str]
 e2eEnv:
     sensitive:
         USER_ADMIN_PASSWORD: ENC[AES256_GCM,data:RXWsMLtLB8v5YSWB,iv:tK9wwRpTuXdSFy5jyjk5aQvXAI58MZiu+aqVXHiz+3Q=,tag:LWyz8EF5wivXiw7BnWz+Fg==,type:str]
@@ -87,7 +89,7 @@ sops:
             RzNiMEZMK1FKUUkrZnBrQks0T24xMTQKmtRTd/JNinFVCUr8ZHAb5pxvuXKe4fZc
             6G8q+m7BuTcuIKcYc0YatdR9Jsd31J7koxXfCh8LJfdATK09NpiEHA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-06-03T13:06:46Z"
-    mac: ENC[AES256_GCM,data:5iE3PFjSzxpoFEM1aj7ksMTpYCLJ7cFkCwMCDHIZRYn1OYXfD+k3ZzZECx5c5kRGFPJDKo4byPr9+/PdM/cW171OOg7bF/mil/dByywQd1iq2BnG5XcN4WijO1yOE2Zwf9DFK1B+kzbLV920ubOBWeUpePnjjDGT+HR5obfz7us=,iv:hkMbjrRAnMsvaWW1EvDTwJVngOKCtgYT/8fwYeyfeeI=,tag:30LPsnO2Kq1wRXkPYyyL+A==,type:str]
+    lastmodified: "2026-08-13T14:50:48Z"
+    mac: ENC[AES256_GCM,data:FofIzEu+JvOz+HNQRYOCrV5cKj/m9cA0fcafE2NNlzpC+FoYTJWqZjtcml2O5vOX61fM6KfGxnOc1g0OZ+PwufHmglCzl1a1dITPpdZzBzWvncM2VQ5nT6OZ20WahzF6s23mOqKP9CkDG6k0PMn2scFcg7NcJrOzQlmfZX71RWE=,iv:qD6LEZiAP4lB9ZE91MHVo+2rlcISVI5NDnw4+CG37sY=,tag:1cDmVWMunRcBOsop86SEQg==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.12.2

k8s/projects-frontend/values.yaml

@@ -45,6 +45,7 @@ config:
     NUXT_APP_LANGCHAIN_TRACE: ''
     NUXT_APP_GOTENBERG_SERVER_URL: ''
     NUXT_PUBLIC_APP_GOTENBERG_ENABLED: ''
+    NUXT_PUBLIC_APP_MCP_ALLOWED_HOSTS: 'localhost|127.0.0.1|claude.ai|claude.com|perplexity.ai|www.perplexity.ai|enterprise.perplexity.ai|chatgpt.com|callback.mistral.ai'
 e2eEnv:
   nonSensitive:
     USER_ADMIN_EMAIL: testautomatatiquedministrateur1@outlook.fr

nuxt.config.ts

@@ -189,6 +189,8 @@ export default defineNuxtConfig({
     appOpenaiApiPromptVersion: '',
     appOpenaiApiVectorStoreId: '',
     appMcpServerUrl: '',
+    appMcpKeycloakClientId: '',
+    appMcpKeycloakClientSecret: '',
     appSorbobotApiToken: '',
     appMcpServerTrace: 0,
     appLangchainTrace: 0,
@@ -214,6 +216,7 @@ export default defineNuxtConfig({
       appApiOrgCode: '',
       appFavicon: '',
       appCaptchaKey: '',
+      appMcpAllowedHosts: '',
       appMixpanelApiUrl: '',
       appMixpanelProjectToken: '',
       appPublicBinariesPrefix: '',

src/mcp-server/index.ts

@@ -1,11 +1,11 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'
-
 import registerOrganizationTool from './projects/organization-tool'
 import registerInstructionTool from './projects/instruction-tool'
 import registerSorbobotTool from './sorbobot/sorbobot-tool'
 import registerProjectTool from './projects/project-tool'
 import registerSearchTool from './projects/search-tool'
 import registerPeopleTool from './projects/people-tool'
+// import registerLoginTool from './projects/login-tool'
 import registerEventTool from './projects/event-tool'
 import type { TypeMcpServer } from '~/interfaces/mcp'
 import registerNewsTool from './projects/news-tool'
@@ -31,6 +31,8 @@ function createMCPServer() {
   //   !!sorbobotApiToken
   // )
 
+  // registerLoginTool(server)
+
   registerSorbobotTool(server)
 
   registerSearchTool(server)

src/mcp-server/projects/base.ts

@@ -1,21 +1,18 @@
 import type { ClientAPIOptions } from 'shared-projects-frontend/apis'
 import { traceMcp } from '@/server/projects-agent/tracers/trace-mcp'
 import type { InferSchema, ToolCallback } from '~/interfaces/mcp'
-import { tokenMap } from '~/server/routes/api/chat-stream'
 
 const runtimeConfig = useRuntimeConfig()
 export const orgCode = runtimeConfig.public.appApiOrgCode
 
 export function getUserToken(extras) {
-  const convesrationId = (extras.requestInfo.headers['authorization'] || '').replace('Bearer ', '')
-  traceMcp('Tool Getting user token for conversationId', convesrationId)
-  const tokenEntry = tokenMap.get(convesrationId)
-  if (tokenEntry) {
-    traceMcp('MCP tool found token for conversationId', tokenEntry.token.substring(0, 6) + '...')
-    return tokenEntry.token
-  } else {
-    traceMcp('MCP tool no token found for conversationId', convesrationId)
+  console.log(extras)
+  const token = (extras.requestInfo.headers['authorization'] || '').replace('Bearer ', '')
+  if (token) {
+    traceMcp('MCP tool user token has token ', token.substring(0, 6) + '...')
+    return token
   }
+  traceMcp('MCP tool user has no token')
   return null
 }
 

src/mcp-server/projects/login-tool.ts

@@ -0,0 +1,30 @@
+import type { TypeMcpServer } from '~/interfaces/mcp'
+import { getUserToken } from './base'
+
+export default (server: TypeMcpServer) => {
+  // Add an search tool
+  server.registerTool(
+    'login',
+    {
+      title: 'Login',
+      description:
+        'Allow the user to login to unlock extra data. If this tool is present, always first propose the user to use it.',
+    },
+    (extras) => {
+      if (!getUserToken(extras))
+        return {
+          content: [
+            {
+              type: 'text',
+              text: 'Use the PRM document (/.well-known/oauth-protected-resource) to authenticate the user.',
+            },
+          ],
+        }
+      return {
+        content: [
+          { type: 'text', text: 'User is authenticated, do not use the login tool again.' },
+        ],
+      }
+    }
+  )
+}

src/server/projects-agent/agent/get-agent.ts

@@ -9,13 +9,13 @@ import getVectorStore from '@/server/utils/vector-db-new.js'
 import { SystemMessage } from '@langchain/core/messages'
 import { createAgent } from 'langchain'
 
-export default async function getAgent(agentData, event, conversationId) {
+export default async function getAgent(agentData, event, userToken) {
   const tools = []
 
   /* --------- MCPs  --------- */
 
   if (agentData.useProjectsMcp || agentData.mcps.length) {
-    const mcpTools = await getMcpTools(agentData, event, conversationId)
+    const mcpTools = await getMcpTools(agentData, event, userToken)
     tools.unshift(...mcpTools)
   }
 

src/server/projects-agent/tools/get-mcp-tools.ts

@@ -7,7 +7,7 @@ const { appMcpServerUrl } = runtimeConfig
 export default async function getMcpTools(
   agentData: any,
   event: any,
-  conversationId: string
+  userToken: string
 ): Promise<any[]> {
   const mcpConfigs = {}
 
@@ -18,7 +18,7 @@ export default async function getMcpTools(
       transport: 'http', // HTTP-based remote server
       url: appMcpServerUrl,
       headers: {
-        Authorization: `${conversationId}`,
+        Authorization: `${userToken}`,
       },
     }
   }

src/server/projects-agent/tracers/trace-mcp.ts

@@ -3,6 +3,6 @@ const { appMcpServerTrace } = runtimeConfig
 
 export const traceMcp = (...args) => {
   if (appMcpServerTrace) {
-    console.log('[MCP TRACE]', ...args)
+    console.log(new Date().toISOString(), '[MCP TRACE]', ...args)
   }
 }

src/server/routes/.well-known/oauth-authorization-server.ts

@@ -0,0 +1,23 @@
+import { applyMcpCors } from '@/server/utils/mcp-cors'
+export default defineLazyEventHandler(() => {
+  const { appMcpServerUrl } = useRuntimeConfig()
+
+  const MCP_URL = appMcpServerUrl.replace(/\?internal=true$/, '').replace(/\/mcp\/?$/, '') // this server's canonical URI
+  // const RESOURCE = `${MCP_URL}/mcp` // RFC 8707 resource indicator
+  // const ISSUER = `${appKeycloakUrl.replace(/\/?$/, '')}/realms/${appKeycloakRealm}/`
+
+  return defineEventHandler(async (event) => {
+    if (applyMcpCors(event)) return
+    return {
+      issuer: MCP_URL,
+      authorization_endpoint: `${MCP_URL}/authorize`,
+      token_endpoint: `${MCP_URL}/token`,
+      registration_endpoint: `${MCP_URL}/register`,
+      response_types_supported: ['code'],
+      grant_types_supported: ['authorization_code', 'refresh_token'],
+      code_challenge_methods_supported: ['S256'],
+      token_endpoint_auth_methods_supported: ['none', 'client_secret_basic'],
+      scopes_supported: ['openid', 'profile', 'email', 'offline_access', 'mcp:tools'],
+    }
+  })
+})

src/server/routes/.well-known/oauth-protected-resource.ts

@@ -0,0 +1,17 @@
+import { applyMcpCors } from '@/server/utils/mcp-cors'
+export default defineLazyEventHandler(() => {
+  const { appMcpServerUrl } = useRuntimeConfig()
+  const MCP_URL = appMcpServerUrl.replace(/\?internal=true$/, '').replace(/\/mcp\/?$/, '') // this server's canonical URI
+  const RESOURCE = `${MCP_URL}/mcp` // RFC 8707 resource indicator
+  // const ISSUER = `${appKeycloakUrl.replace(/\/?$/, '')}/realms/${appKeycloakRealm}/`
+
+  return defineEventHandler(async (event) => {
+    if (applyMcpCors(event)) return
+    return {
+      resource: RESOURCE,
+      authorization_servers: [MCP_URL],
+      bearer_methods_supported: ['header'],
+      scopes_supported: ['mcp:tools'],
+    }
+  })
+})

src/server/routes/api/chat-lg-stream.ts

@@ -4,7 +4,6 @@ import { traceMcp } from '@/server/projects-agent/tracers/trace-mcp'
 import type { BaseMessageChunk } from '@langchain/core/messages'
 import { initChatModel } from 'langchain/chat_models/universal'
 import { MultiServerMCPClient } from '@langchain/mcp-adapters'
-import { tokenMap } from '~/server/routes/api/chat-stream'
 import getVectorStore from '~/server/utils/vector-db-new'
 import { createAgent, createMiddleware } from 'langchain'
 import { MemorySaver } from '@langchain/langgraph'
@@ -22,10 +21,6 @@ const {
 } = runtimeConfig
 const { appChatbotEnabled } = runtimeConfig.public
 
-// TODO use own token map instead chat-stream one when refactoed
-// Map conversationId to token and date for authed api requests in MCP
-// export const tokenMap = new Map<string, { date: Date; token: string }>()
-
 export const checkpointer = new MemorySaver()
 
 // TODO use own traceMcp map instead cgat-stream one when refactoed
@@ -59,15 +54,6 @@ export default defineLazyEventHandler(() => {
       })
     }
 
-    // clean up token map as a bonus
-    const now = new Date()
-    for (const [key, value] of tokenMap.entries()) {
-      const diff = now.getTime() - value.date.getTime()
-      if (diff > 60 * 60 * 1000) {
-        tokenMap.delete(key)
-      }
-    }
-
     const tokenHeader = getRequestHeader(event, 'authorization') || ''
     if (tokenHeader) {
       traceMcp('chat-stream: got Authorization header provided')
@@ -98,12 +84,6 @@ export default defineLazyEventHandler(() => {
       traceLangchain('Starting new conversation with id:', conversationId)
     }
 
-    traceMcp('set token map ', conversationId)
-    tokenMap.set(conversationId, {
-      date: new Date(),
-      token: ('' + tokenHeader).replace('Bearer ', ''),
-    })
-
     const tools = []
 
     if (appMcpServerUrl) {
@@ -113,7 +93,7 @@ export default defineLazyEventHandler(() => {
           transport: 'http', // HTTP-based remote server
           url: appMcpServerUrl,
           headers: {
-            Authorization: `${conversationId}`,
+            Authorization: `${tokenHeader}`,
           },
         },
       })

src/server/routes/api/chatbot/chat.ts

@@ -7,7 +7,7 @@ import checkAdminRights, { getUser } from '@/server/utils/check-admin-rights.js'
 import traceLangchain from '@/server/projects-agent/tracers/trace-langchain'
 import getAgentData from '@/server/projects-agent/agent/get-agent-data'
 import getMetadata from '@/server/projects-agent/agent/get-metadata'
-import { traceMcp } from '@/server/projects-agent/tracers/trace-mcp'
+// import { traceMcp } from '@/server/projects-agent/tracers/trace-mcp'
 import getAgent from '@/server/projects-agent/agent/get-agent'
 import { tokenMap } from '@/server/routes/api/chat-stream'
 import { v4 as uuidv4 } from 'uuid'
@@ -114,13 +114,13 @@ export default defineLazyEventHandler(() => {
       traceLangchain('Starting new conversation with id:', conversationId)
     }
 
-    traceMcp('set token map ', conversationId)
-    tokenMap.set(conversationId, {
-      date: new Date(),
-      token: ('' + tokenHeader).replace('Bearer ', ''),
-    })
+    // traceMcp('set token map ', conversationId)
+    // tokenMap.set(conversationId, {
+    //   date: new Date(),
+    //   token: ('' + tokenHeader).replace('Bearer ', ''),
+    // })
 
-    const agent = await getAgent(agentData, event, conversationId)
+    const agent = await getAgent(agentData, event, tokenHeader)
 
     /* --------- Start coversation  --------- */
 

src/server/routes/authorize.get.ts

@@ -0,0 +1,37 @@
+// server/routes/authorize.get.ts
+import { traceMcp } from '@/server/projects-agent/tracers/trace-mcp'
+import { applyMcpCors } from '@/server/utils/mcp-cors'
+
+export default defineEventHandler(async (event) => {
+  if (applyMcpCors(event)) return
+  const { appKeycloakUrl, appKeycloakRealm, appMcpAllowedHosts } = useRuntimeConfig().public
+  const query = getQuery(event)
+  const ALLOWED_REDIRECT_HOSTS = ((appMcpAllowedHosts as string) || '').split('|')
+  traceMcp('/authorize hit with with query:\n', JSON.stringify(query, null, 2))
+
+  // Defensive: refuse to forward to Keycloak if redirect_uri isn't one we trust.
+  // This is an open-redirect guard — without it, this route would let anyone
+  // construct a Keycloak login flow that redirects the resulting code anywhere.
+  const redirectUri = query.redirect_uri as string | undefined
+  if (redirectUri) {
+    try {
+      const host = new URL(redirectUri).hostname
+      if (!ALLOWED_REDIRECT_HOSTS.includes(host)) {
+        traceMcp(
+          `Rejecting /authorize: disallowed redirect_uri host ${host} (allowed: ${ALLOWED_REDIRECT_HOSTS.map((host) => `"${host}"`).join(', ')}) `
+        )
+        throw createError({ statusCode: 400, statusMessage: 'invalid_redirect_uri' })
+      }
+    } catch (err) {
+      traceMcp('Error in /authorize', err)
+      throw createError({ statusCode: 400, statusMessage: 'invalid_redirect_uri' })
+    }
+  }
+
+  const ISSUER = `${appKeycloakUrl.replace(/\/$/, '')}/realms/${appKeycloakRealm}`
+  const qs = new URLSearchParams(query as Record<string, string>).toString()
+  const target = `${ISSUER}/protocol/openid-connect/auth?${qs}`
+
+  traceMcp('Redirecting /authorize to Keycloak', target)
+  return sendRedirect(event, target, 302)
+})