mirror of
https://github.com/HolgerHatGarKeineNode/einundzwanzig-app.git
synced 2026-06-11 02:50:29 +00:00
HolgerHatGarKeineNode
d0544bfac9
- 🔒 Added migrations for `oauth_access_tokens`, `oauth_refresh_tokens`, `oauth_auth_codes`, `oauth_clients`, and `oauth_device_codes`. - 🤖 Created MCP tools (Meetups, Cities, Venues, Courses, Lecturers) for managing entities with authentication and validation. - 🛠️ Implemented Passport-backed OAuth API guard configuration and validation endpoints. - ✅ Added comprehensive feature tests for MCP tools and OAuth functionality (access control, validation, and token-based authentication).
57 lines
1.7 KiB
PHP
57 lines
1.7 KiB
PHP
<?php
|
|
|
|
return [
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Redirect Domains
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| These domains are the domains that OAuth clients are permitted to use
|
|
| for redirect URIs. Each domain should be specified with its scheme
|
|
| and host. Domains not in this list will raise validation errors.
|
|
|
|
|
| An "*" may be used to allow all domains.
|
|
|
|
|
*/
|
|
|
|
'redirect_domains' => [
|
|
// Claude.ai / Claude Desktop Web-Connectors (OAuth 2.1 Custom Connector).
|
|
'https://claude.ai',
|
|
'https://claude.com',
|
|
// Lokale Entwicklung / MCP Inspector.
|
|
'http://localhost',
|
|
],
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Allowed Custom Schemes
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Native desktop OAuth clients like Cursor and VS Code use private-use URI
|
|
| schemes (RFC 8252) for redirect callbacks instead of standard schemes
|
|
| like HTTPS. Here, you may list which custom schemes you will allow.
|
|
|
|
|
*/
|
|
|
|
'custom_schemes' => [
|
|
// 'claude',
|
|
// 'cursor',
|
|
// 'vscode',
|
|
],
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Authorization Server
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Here you may configure the OAuth authorization server issuer identifier
|
|
| per RFC 8414. This value appears in your protected resource and auth
|
|
| server metadata endpoints. When null, this defaults to `url('/')`.
|
|
|
|
|
*/
|
|
|
|
'authorization_server' => null,
|
|
|
|
];
|