Skip to main content

skiff_cli/oauth/
mod.rs

1//! OAuth 2.1 for MCP HTTP / OpenAPI / GraphQL — wraps `rmcp::transport::auth`.
2//!
3//! Credentials and sticky redirect metadata live under
4//! `$SKIFF_CACHE_DIR/oauth/<server-hash>/` with `0o700` dirs and `0o600` files.
5//! Authorization-code callbacks bind loopback only; sticky URIs are re-validated.
6
7mod browser;
8mod callback;
9mod config;
10mod setup;
11mod store;
12
13pub use config::{
14    find_free_port, oauth_dir_for_server, parse_oauth_flow, port_available, resolve_redirect_uri,
15    server_hash, validate_redirect_uri, OAuthFlow, OAuthOptions,
16};
17pub use setup::{
18    authorize, clear_oauth_credentials, discovery_url_from_args, oauth_wanted, options_from_args,
19    setup_from_args, OAuthReady,
20};
21pub use store::FileCredentialStore;