alihan/kubernetes-mcp-server
1
0
Fork 0
mirror of https://github.com/containers/kubernetes-mcp-server.git synced 2025-10-23 01:22:57 +03:00
Code Issues Packages Projects Releases Wiki Activity

feat(auth): introduce OIDC token verification if authorization-url is specified (176)

Browse Source 
Pass correct audience
---
Validate server and authorization url via url.Parse
---
Import go-oidc/v3
---
Wire initialized oidc provider if authorization url is set
---
Wire oidc issuer validation
This commit is contained in:
Arda Güçlü
2025-07-16 15:45:18 +03:00
committed by GitHub
parent 5c753275ab
commit 77671617df
8 changed files with 278 additions and 55 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
pkg/mcp/mcp.go
View File

@@ -6,6 +6,7 @@ import (
"net/http"
"slices"
"github.com/coreos/go-oidc/v3/oidc"
"github.com/mark3labs/mcp-go/mcp"
"github.com/mark3labs/mcp-go/server"
authenticationapiv1 "k8s.io/api/authentication/v1"
@@ -18,8 +19,9 @@ import (
)
type Configuration struct {
Profile Profile
ListOutput output.Output
Profile Profile
ListOutput output.Output
OIDCProvider *oidc.Provider
StaticConfig *config.StaticConfig
}
@@ -105,9 +107,9 @@ func (s *Server) ServeHTTP(httpServer *http.Server) *server.StreamableHTTPServer
return server.NewStreamableHTTPServer(s.server, options...)
}
// VerifyToken verifies the given token with the audience by
// VerifyTokenAPIServer verifies the given token with the audience by
// sending an TokenReview request to API Server.
func (s *Server) VerifyToken(ctx context.Context, token string, audience string) (*authenticationapiv1.UserInfo, []string, error) {
func (s *Server) VerifyTokenAPIServer(ctx context.Context, token string, audience string) (*authenticationapiv1.UserInfo, []string, error) {
if s.k == nil {
return nil, nil, fmt.Errorf("kubernetes manager is not initialized")
}
@@ -122,6 +124,13 @@ func (s *Server) GetKubernetesAPIServerHost() string {
return s.k.GetAPIServerHost()
}
func (s *Server) GetOIDCProvider() *oidc.Provider {
if s.configuration.OIDCProvider == nil {
return nil
}
return s.configuration.OIDCProvider
}
func (s *Server) Close() {
if s.k != nil {
s.k.Close()