@@ -461,11 +919,20 @@ import {
Save,
X,
Rows3,
- Braces
+ Braces,
+ KeyRound,
+ Globe2,
+ Building2,
+ UserRound,
+ Search
} from 'lucide-vue-next'
import { mcpApi } from '@/apis/mcp_api'
import { formatFullDateTime } from '@/utils/time'
+import { extractSecretFieldNames } from '@/utils/mcpAuthConfigBuilder'
+import McpAuthConfigBuilder from '@/components/extensions/McpAuthConfigBuilder.vue'
import McpEnvEditor from '@/components/McpEnvEditor.vue'
+import { departmentApi } from '@/apis/department_api'
+import { userApi } from '@/apis/user_api'
const route = useRoute()
const router = useRouter()
@@ -476,11 +943,34 @@ const server = ref(null)
const detailTab = ref('general')
const testLoading = ref(null)
+const userList = ref([])
+const departmentList = ref([])
+const isFetchingScopeOptions = ref(false)
+
const tools = ref([])
const toolsLoading = ref(false)
const toolsError = ref(null)
const toolSearchText = ref('')
const toggleToolLoading = ref(null)
+const connections = ref([])
+const connectionsLoading = ref(false)
+const connectionsError = ref(null)
+const connectionFilter = ref('all')
+const connectionSearchText = ref('')
+const connectionPage = ref(1)
+const connectionPageSize = ref(12)
+const connectionTotal = ref(0)
+const connectionSummary = reactive({
+ total: 0,
+ active: 0,
+ attention: 0,
+ disabled: 0
+})
+let connectionSearchTimer = null
+const showConnectionForm = ref(false)
+const connectionSubmitting = ref(false)
+const connectionActionLoading = ref(null)
+const editingConnectionId = ref(null)
const isEditing = ref(false)
const editLoading = ref(false)
@@ -496,17 +986,121 @@ const editForm = reactive({
args: [],
env: null,
headersText: '',
+ authConfigText: '',
timeout: null,
sse_read_timeout: null,
tags: [],
icon: ''
})
+const connectionForm = reactive({
+ scopeType: 'department',
+ scopeId: '',
+ displayName: '',
+ externalSubject: '',
+ credentialText: '',
+ secretValues: {},
+ metaText: ''
+})
+
+const connectionScopeOptions = [
+ {
+ value: 'system',
+ label: '全局共享',
+ description: '所有用户共用',
+ icon: Globe2
+ },
+ {
+ value: 'department',
+ label: '部门共享',
+ description: '按部门隔离',
+ icon: Building2
+ },
+ {
+ value: 'user',
+ label: '个人专用',
+ description: '按用户隔离',
+ icon: UserRound
+ }
+]
+
+const scopeLabelMap = {
+ inline: '内联',
+ system: '全局共享',
+ department: '部门共享',
+ user: '个人专用'
+}
+
+const statusLabelMap = {
+ active: '启用',
+ disabled: '停用',
+ reauth_required: '需要重连',
+ invalid: '无效'
+}
+
+const providerLabelMap = {
+ none: '不启用',
+ bound_secret: '绑定长期密钥',
+ custom_http_token: '接口换 Token',
+ stdio_env: 'StdIO 环境变量',
+ client_credentials: 'OAuth2 客户端凭证'
+}
+
+const connectionFilterOptions = [
+ { label: '全部', value: 'all' },
+ { label: '生效中', value: 'active' },
+ { label: '需处理', value: 'attention' },
+ { label: '未启用', value: 'disabled' }
+]
+
const actionLabel = computed(() => {
- if (server.value?.enabled === false) return '添加'
- return server.value?.created_by === 'system' ? '移除' : '删除'
+ if (server.value?.enabled === false) return '恢复'
+ return server.value?.created_by === 'system' ? '移除' : '退役'
+})
+
+const isEditingConnection = computed(() => editingConnectionId.value !== null)
+
+const hasAuthConfig = computed(
+ () => !!server.value?.auth_config && Object.keys(server.value.auth_config).length > 0
+)
+
+const validConnectionScopeTypes = ['system', 'department', 'user']
+
+const effectiveConnectionScopeType = computed(() => {
+ const bindingScope = server.value?.auth_config?.binding_scope
+ return validConnectionScopeTypes.includes(bindingScope) ? bindingScope : ''
+})
+
+const availableConnectionScopeOptions = computed(() => {
+ if (!effectiveConnectionScopeType.value) return connectionScopeOptions
+ return connectionScopeOptions.filter(
+ (option) => option.value === effectiveConnectionScopeType.value
+ )
+})
+
+const authBindingScopeLabel = computed(() => {
+ const bindingScope = server.value?.auth_config?.binding_scope
+ return scopeLabelMap[bindingScope] || '未限定'
+})
+
+const connectionTotalCount = computed(() => connectionSummary.total || connectionTotal.value)
+
+const activeConnectionCount = computed(() => connectionSummary.active || 0)
+
+const attentionConnectionCount = computed(() => connectionSummary.attention || 0)
+
+const hasConnectionListFilter = computed(
+ () => connectionFilter.value !== 'all' || Boolean(connectionSearchText.value.trim())
+)
+
+const connectionEmptyDescription = computed(() => {
+ if (hasConnectionListFilter.value) return '没有匹配的连接。'
+ if (hasAuthConfig.value) return '暂无连接。创建连接后，运行时会按绑定范围自动选择凭据。'
+ return '当前 MCP 没有启用动态鉴权连接。'
})
+const connectionDrawerTitle = computed(() => (isEditingConnection.value ? '编辑连接' : '新建连接'))
+
const filteredTools = computed(() => {
if (!toolSearchText.value) return tools.value
const search = toolSearchText.value.toLowerCase()
@@ -524,6 +1118,36 @@ const isStdioTransport = computed(
.toLowerCase() === 'stdio'
)
+const credentialSecretFields = computed(() =>
+ extractSecretFieldNames(server.value?.auth_config || {})
+)
+
+const connectionCredentialsRequired = computed(() => credentialSecretFields.value.length > 0)
+
+const showScopeIdField = computed(() => connectionForm.scopeType !== 'system')
+
+const scopeIdLabel = computed(() => {
+ if (connectionForm.scopeType === 'department') return '部门'
+ if (connectionForm.scopeType === 'user') return '用户'
+ return '范围标识'
+})
+
+const scopeIdPlaceholder = computed(() => {
+ if (connectionForm.scopeType === 'department') return '请选择部门'
+ if (connectionForm.scopeType === 'user') return '请选择用户'
+ return '留空默认 global'
+})
+
+const credentialHint = computed(() => {
+ if (isEditingConnection.value) {
+ return '为安全起见不回显已有凭据；留空表示保持原值。'
+ }
+ if (credentialSecretFields.value.length > 0) {
+ return '系统已根据认证配置推导出需要录入的密钥字段。'
+ }
+ return '当前认证配置没有声明密钥字段，可直接粘贴长期 token。'
+})
+
const goBack = () => {
router.push({ path: '/extensions', query: { tab: 'mcp' } })
}
@@ -535,6 +1159,164 @@ const getTransportColor = (transport) => {
return colors[transport] || 'blue'
}
+const createEmptySecretValues = () =>
+ Object.fromEntries(credentialSecretFields.value.map((fieldName) => [fieldName, '']))
+
+const setNestedSecretValue = (target, path, value) => {
+ const segments = String(path || '')
+ .split('.')
+ .filter(Boolean)
+ let current = target
+ segments.forEach((segment, index) => {
+ if (index === segments.length - 1) {
+ current[segment] = value
+ return
+ }
+ current[segment] = current[segment] || {}
+ current = current[segment]
+ })
+}
+
+const getConnectionTitle = (connection) =>
+ connection.display_name ||
+ `${getConnectionScopeLabel(connection.scope_type)} ${getConnectionScopeTargetLabel(connection)}`
+
+const getConnectionScopeLabel = (scopeType) => scopeLabelMap[scopeType] || scopeType || '未知范围'
+
+const getConnectionStatusLabel = (status) => statusLabelMap[status] || status || '未知状态'
+
+const isConnectionScopeMatched = (connection) =>
+ !effectiveConnectionScopeType.value ||
+ connection?.scope_type === effectiveConnectionScopeType.value
+
+const isConnectionCredentialMissing = (connection) =>
+ connectionCredentialsRequired.value && !connection?.has_credentials
+
+const getConnectionScopeTargetLabel = (connection) => {
+ const scopeId = String(connection?.scope_id || '')
+ if (connection?.scope_type === 'system') {
+ return '全部用户'
+ }
+ if (connection?.scope_type === 'department') {
+ const department = departmentList.value.find((item) => String(item.id) === scopeId)
+ return department ? `${department.name} (#${department.id})` : `部门 #${scopeId || '-'}`
+ }
+ if (connection?.scope_type === 'user') {
+ const user = userList.value.find(
+ (item) => String(item.id) === scopeId || String(item.user_id) === scopeId
+ )
+ if (!user) return `用户 #${scopeId || '-'}`
+ return user.username === user.user_id ? user.username : `${user.username} (${user.user_id})`
+ }
+ return scopeId || '未指定'
+}
+
+const canToggleConnectionStatus = (connection) => {
+ if (!['active', 'disabled'].includes(connection?.status)) return false
+ if (connection.status === 'disabled') {
+ return isConnectionScopeMatched(connection) && !isConnectionCredentialMissing(connection)
+ }
+ return true
+}
+
+const getConnectionStatusSwitchLabel = (connection) => {
+ if (connection?.status === 'active') return '已启用'
+ return getConnectionStatusLabel(connection?.status)
+}
+
+const getConnectionStatusToggleTooltip = (connection) => {
+ if (connection?.status === 'active') return '停用连接'
+ if (connection?.status === 'disabled') {
+ if (!isConnectionScopeMatched(connection)) {
+ return `该连接未生效，不能启用；当前 MCP 使用${authBindingScopeLabel.value}`
+ }
+ if (isConnectionCredentialMissing(connection)) {
+ return '请先补充凭据'
+ }
+ return '启用连接'
+ }
+ return '请先重连或编辑凭据'
+}
+
+const canTestConnection = (connection) =>
+ isConnectionScopeMatched(connection) && !isConnectionCredentialMissing(connection)
+
+const getConnectionTestTooltip = (connection) => {
+ if (canTestConnection(connection)) return '测试连接'
+ if (isConnectionCredentialMissing(connection)) return '请先补充凭据'
+ return `该连接未生效，当前 MCP 使用${authBindingScopeLabel.value}`
+}
+
+const canReauthorizeConnection = (connection) =>
+ isConnectionScopeMatched(connection) && !isConnectionCredentialMissing(connection)
+
+const getConnectionReauthorizeTooltip = (connection) => {
+ if (canReauthorizeConnection(connection)) return '重置授权并重新激活'
+ if (isConnectionCredentialMissing(connection)) return '请先补充凭据'
+ return `该连接未生效，不能重连；当前 MCP 使用${authBindingScopeLabel.value}`
+}
+
+const getConnectionIssue = (connection) => {
+ if (!isConnectionScopeMatched(connection)) {
+ return {
+ key: 'scope_mismatch',
+ label: '范围不匹配',
+ description: `当前 MCP 使用${authBindingScopeLabel.value}，这组连接不会在运行时生效。`,
+ actionLabel: '新建匹配连接',
+ tone: 'warning'
+ }
+ }
+ if (isConnectionCredentialMissing(connection)) {
+ return {
+ key: 'missing_credentials',
+ label: '缺少凭据',
+ description: '缺少长期凭据，运行时无法换取或注入 token。',
+ actionLabel: '补充凭据',
+ tone: 'error'
+ }
+ }
+ if (connection?.status === 'reauth_required') {
+ return {
+ key: 'reauth_required',
+ label: '授权失效',
+ description: '缓存 token 已失效，需要重新授权后才能继续使用。',
+ actionLabel: '重连',
+ tone: 'warning'
+ }
+ }
+ if (connection?.status === 'invalid' || connection?.meta_json?.last_error?.message) {
+ return {
+ key: 'test_failed',
+ label: '测试失败',
+ description: connection?.meta_json?.last_error?.message || '最近一次连接检测失败。',
+ actionLabel: '编辑凭据',
+ tone: 'error'
+ }
+ }
+ return null
+}
+
+const getConnectionLastInfo = (connection) => {
+ if (connection.meta_json?.last_success_at) {
+ return `最近成功 ${formatTime(connection.meta_json.last_success_at)}`
+ }
+ if (connection.updated_at) {
+ return `更新于 ${formatTime(connection.updated_at)}`
+ }
+ return '暂无记录'
+}
+
+const getSecretFieldLabel = (fieldName) => {
+ const labelMap = {
+ client_id: 'Client ID',
+ client_secret: 'Client Secret',
+ access_token: 'Access Token',
+ refresh_token: 'Refresh Token',
+ issuer_url: 'Issuer URL'
+ }
+ return labelMap[fieldName] || fieldName
+}
+
const resetEditForm = (data) => {
Object.assign(editForm, {
name: data?.name || '',
@@ -545,6 +1327,7 @@ const resetEditForm = (data) => {
args: data?.args || [],
env: data?.env || null,
headersText: data?.headers ? JSON.stringify(data.headers, null, 2) : '',
+ authConfigText: data?.auth_config ? JSON.stringify(data.auth_config, null, 2) : '',
timeout: data?.timeout,
sse_read_timeout: data?.sse_read_timeout,
tags: data?.tags || [],
@@ -586,6 +1369,20 @@ const parseJsonToForm = () => {
}
}
+const parseJsonText = (text, label, { allowRawString = false } = {}) => {
+ const trimmed = String(text || '').trim()
+ if (!trimmed) return null
+ try {
+ return JSON.parse(trimmed)
+ } catch {
+ if (allowRawString) {
+ return trimmed
+ }
+ message.error(`${label} JSON 格式错误`)
+ return undefined
+ }
+}
+
const buildEditPayload = () => {
if (formMode.value === 'json') {
try {
@@ -606,6 +1403,11 @@ const buildEditPayload = () => {
}
}
+ const authConfig = parseJsonText(editForm.authConfigText, '认证配置')
+ if (authConfig === undefined) {
+ return null
+ }
+
return {
name: editForm.name,
description: editForm.description || null,
@@ -615,6 +1417,7 @@ const buildEditPayload = () => {
args: editForm.args.length > 0 ? editForm.args : null,
env: editForm.env,
headers,
+ auth_config: authConfig,
timeout: editForm.timeout || null,
sse_read_timeout: editForm.sse_read_timeout || null,
tags: editForm.tags.length > 0 ? editForm.tags : null,
@@ -622,6 +1425,46 @@ const buildEditPayload = () => {
}
}
+const getDefaultConnectionScopeType = () =>
+ availableConnectionScopeOptions.value[0]?.value || 'department'
+
+const resetConnectionForm = () => {
+ editingConnectionId.value = null
+ Object.assign(connectionForm, {
+ scopeType: getDefaultConnectionScopeType(),
+ scopeId: '',
+ displayName: '',
+ externalSubject: '',
+ credentialText: '',
+ secretValues: createEmptySecretValues(),
+ metaText: ''
+ })
+}
+
+const openCreateConnectionDrawer = () => {
+ resetConnectionForm()
+ showConnectionForm.value = true
+}
+
+const closeConnectionForm = () => {
+ showConnectionForm.value = false
+ resetConnectionForm()
+}
+
+const startEditConnection = (connection) => {
+ editingConnectionId.value = connection.id
+ showConnectionForm.value = true
+ Object.assign(connectionForm, {
+ scopeType: connection.scope_type || 'department',
+ scopeId: connection.scope_id || '',
+ displayName: connection.display_name || '',
+ externalSubject: connection.external_subject || '',
+ credentialText: '',
+ secretValues: createEmptySecretValues(),
+ metaText: connection.meta_json ? JSON.stringify(connection.meta_json, null, 2) : ''
+ })
+}
+
const validateEditPayload = (data) => {
if (!data.name?.trim()) {
message.error('MCP 名称不能为空')
@@ -700,6 +1543,68 @@ const fetchTools = async () => {
}
}
+const fetchConnections = async () => {
+ if (!server.value) return
+ try {
+ connectionsLoading.value = true
+ connectionsError.value = null
+ const result = await mcpApi.getMcpServerConnections(server.value.name, {
+ paginated: true,
+ status: connectionFilter.value,
+ search: connectionSearchText.value.trim(),
+ page: connectionPage.value,
+ page_size: connectionPageSize.value
+ })
+ if (result.success) {
+ if (Array.isArray(result.data)) {
+ connections.value = result.data
+ connectionTotal.value = result.data.length
+ Object.assign(connectionSummary, {
+ total: result.data.length,
+ active: result.data.filter(
+ (connection) =>
+ connection.status === 'active' &&
+ isConnectionScopeMatched(connection) &&
+ !isConnectionCredentialMissing(connection)
+ ).length,
+ attention: result.data.filter((connection) => Boolean(getConnectionIssue(connection)))
+ .length,
+ disabled: result.data.filter((connection) => connection.status === 'disabled').length
+ })
+ return
+ }
+ const pageData = result.data || {}
+ const nextConnections = pageData.items || []
+ const nextTotal = pageData.total || 0
+ const nextPageSize = pageData.page_size || connectionPageSize.value
+ if (connectionPage.value > 1 && nextConnections.length === 0 && nextTotal > 0) {
+ connectionPage.value = Math.ceil(nextTotal / nextPageSize)
+ await fetchConnections()
+ return
+ }
+ connections.value = nextConnections
+ connectionTotal.value = nextTotal
+ connectionPageSize.value = nextPageSize
+ Object.assign(connectionSummary, {
+ total: pageData.summary?.total || 0,
+ active: pageData.summary?.active || 0,
+ attention: pageData.summary?.attention || 0,
+ disabled: pageData.summary?.disabled || 0
+ })
+ } else {
+ connectionsError.value = result.message || '获取连接列表失败'
+ connections.value = []
+ connectionTotal.value = 0
+ }
+ } catch (err) {
+ connectionsError.value = err.message || '获取连接列表失败'
+ connections.value = []
+ connectionTotal.value = 0
+ } finally {
+ connectionsLoading.value = false
+ }
+}
+
const handleToggleTool = async (tool) => {
if (!server.value) return
try {
@@ -745,22 +1650,226 @@ const handleTestServer = async () => {
}
}
-const handleDangerAction = async () => {
- if (!server.value) return
- if (server.value.enabled === false) {
- await handleSetServerEnabled(server.value, true)
- return
- }
- if (server.value.created_by === 'system') {
- await handleSetServerEnabled(server.value, false)
- return
+const buildConnectionCredential = () => {
+ const rawCredential = parseJsonText(connectionForm.credentialText, '长期凭据', {
+ allowRawString: true
+ })
+ if (rawCredential === undefined) return undefined
+ if (rawCredential !== null) return rawCredential
+
+ const secrets = {}
+ Object.entries(connectionForm.secretValues).forEach(([key, value]) => {
+ const trimmedValue = String(value || '').trim()
+ if (trimmedValue) {
+ setNestedSecretValue(secrets, key, trimmedValue)
+ }
+ })
+
+ if (Object.keys(secrets).length === 0) {
+ return null
}
- confirmDeleteServer(server.value)
+ return { secrets }
}
-const handleSetServerEnabled = async (srv, enabled) => {
- try {
- const result = await mcpApi.updateMcpServerStatus(srv.name, enabled)
+const validateConnectionCredential = () => {
+ if (isEditingConnection.value || credentialSecretFields.value.length === 0) {
+ return true
+ }
+
+ const missingFields = credentialSecretFields.value.filter(
+ (fieldName) => !String(connectionForm.secretValues[fieldName] || '').trim()
+ )
+ if (missingFields.length === 0 || connectionForm.credentialText.trim()) {
+ return true
+ }
+
+ message.error(`请填写凭据字段：${missingFields.join('、')}`)
+ return false
+}
+
+const handleSubmitConnection = async () => {
+ if (!server.value) return
+
+ const scopeId = connectionForm.scopeType === 'system' ? 'global' : connectionForm.scopeId.trim()
+ if (!scopeId) {
+ message.error(`${scopeIdLabel.value}不能为空`)
+ return
+ }
+ if (!validateConnectionCredential()) return
+
+ const metaJson = parseJsonText(connectionForm.metaText, '连接元数据')
+ if (metaJson === undefined) return
+ const credential = buildConnectionCredential()
+ if (credential === undefined) return
+
+ try {
+ connectionSubmitting.value = true
+ const payload = {
+ display_name: connectionForm.displayName || null,
+ external_subject: connectionForm.externalSubject || null,
+ meta_json: metaJson
+ }
+ if (credential !== null) {
+ payload.credential = credential
+ }
+
+ const result = isEditingConnection.value
+ ? await mcpApi.updateMcpServerConnection(
+ server.value.name,
+ editingConnectionId.value,
+ payload
+ )
+ : await mcpApi.createMcpServerConnection(server.value.name, {
+ scope_type: connectionForm.scopeType,
+ scope_id: scopeId,
+ status: 'active',
+ ...payload
+ })
+ if (result.success) {
+ message.success(isEditingConnection.value ? '连接更新成功' : '连接创建成功')
+ showConnectionForm.value = false
+ resetConnectionForm()
+ await fetchConnections()
+ } else {
+ message.error(result.message || (isEditingConnection.value ? '连接更新失败' : '连接创建失败'))
+ }
+ } catch (err) {
+ message.error(err.message || (isEditingConnection.value ? '连接更新失败' : '连接创建失败'))
+ } finally {
+ connectionSubmitting.value = false
+ }
+}
+
+const handleToggleConnectionStatus = async (connection, checked) => {
+ if (!server.value || !canToggleConnectionStatus(connection)) return
+ const nextStatus = checked ? 'active' : 'disabled'
+ if (connection.status === nextStatus) return
+ const loadingKey = `${connection.id}:status`
+ try {
+ connectionActionLoading.value = loadingKey
+ const result = await mcpApi.updateMcpConnectionStatus(
+ server.value.name,
+ connection.id,
+ nextStatus
+ )
+ if (result.success) {
+ message.success(result.message || (checked ? '连接已启用' : '连接已停用'))
+ await fetchConnections()
+ } else {
+ message.error(result.message || '状态更新失败')
+ await fetchConnections()
+ }
+ } catch (err) {
+ message.error(err.message || '状态更新失败')
+ await fetchConnections()
+ } finally {
+ connectionActionLoading.value = null
+ }
+}
+
+const handleTestConnection = async (connection) => {
+ if (!server.value || !canTestConnection(connection)) return
+ const loadingKey = `${connection.id}:test`
+ try {
+ connectionActionLoading.value = loadingKey
+ const result = await mcpApi.testMcpConnection(server.value.name, connection.id)
+ if (result.success) {
+ message.success(result.message || '连接测试成功')
+ await fetchConnections()
+ } else {
+ message.error(result.message || '连接测试失败')
+ }
+ } catch (err) {
+ message.error(err.message || '连接测试失败')
+ } finally {
+ connectionActionLoading.value = null
+ }
+}
+
+const handleConnectionIssueAction = (connection) => {
+ const issue = getConnectionIssue(connection)
+ if (!issue) return
+ if (issue.key === 'scope_mismatch') {
+ openCreateConnectionDrawer()
+ return
+ }
+ if (issue.key === 'missing_credentials' || issue.key === 'test_failed') {
+ startEditConnection(connection)
+ return
+ }
+ if (issue.key === 'reauth_required') {
+ handleReauthorizeConnection(connection)
+ }
+}
+
+const resetConnectionFilters = () => {
+ connectionFilter.value = 'all'
+ connectionSearchText.value = ''
+}
+
+const handleReauthorizeConnection = async (connection) => {
+ if (!server.value || !canReauthorizeConnection(connection)) return
+ const loadingKey = `${connection.id}:reauth`
+ try {
+ connectionActionLoading.value = loadingKey
+ const result = await mcpApi.reauthorizeMcpConnection(server.value.name, connection.id)
+ if (result.success) {
+ message.success(result.message || '连接已重置')
+ await fetchConnections()
+ } else {
+ message.error(result.message || '连接重置失败')
+ }
+ } catch (err) {
+ message.error(err.message || '连接重置失败')
+ } finally {
+ connectionActionLoading.value = null
+ }
+}
+
+const handleDeleteConnection = (connection) => {
+ if (!server.value) return
+ Modal.confirm({
+ title: '确认删除连接',
+ content: `确定要删除连接 "${getConnectionTitle(connection)}" 吗？`,
+ okText: '删除',
+ okType: 'danger',
+ cancelText: '取消',
+ async onOk() {
+ try {
+ const result = await mcpApi.deleteMcpServerConnection(server.value.name, connection.id)
+ if (result.success) {
+ message.success(result.message || '连接已删除')
+ if (editingConnectionId.value === connection.id) {
+ showConnectionForm.value = false
+ resetConnectionForm()
+ }
+ await fetchConnections()
+ } else {
+ message.error(result.message || '连接删除失败')
+ }
+ } catch (err) {
+ message.error(err.message || '连接删除失败')
+ }
+ }
+ })
+}
+
+const handleDangerAction = async () => {
+ if (!server.value) return
+ if (server.value.enabled === false) {
+ await handleSetServerEnabled(server.value, true)
+ return
+ }
+ if (server.value.created_by === 'system') {
+ await handleSetServerEnabled(server.value, false)
+ return
+ }
+ confirmDeleteServer(server.value)
+}
+
+const handleSetServerEnabled = async (srv, enabled) => {
+ try {
+ const result = await mcpApi.updateMcpServerStatus(srv.name, enabled)
if (result.success) {
message.success(result.message || `MCP 已${enabled ? '添加' : '移除'}`)
await fetchServer()
@@ -774,17 +1883,17 @@ const handleSetServerEnabled = async (srv, enabled) => {
const confirmDeleteServer = (srv) => {
Modal.confirm({
- title: '确认删除 MCP',
- content: `确定要删除 MCP "${srv.name}" 吗？此操作不可撤销。`,
- okText: '删除',
- okType: 'danger',
+ title: '确认退役 MCP',
+ content: `确定要退役 MCP "${srv.name}" 吗？退役后不会再被新运行加载，但配置和连接会保留。`,
+ okText: '退役',
+ okType: 'primary',
cancelText: '取消',
async onOk() {
try {
const result = await mcpApi.deleteMcpServer(srv.name)
if (result.success) {
- message.success('MCP 删除成功')
- router.push({ path: '/extensions', query: { tab: 'mcp' } })
+ message.success(result.message || 'MCP 已退役')
+ await fetchServer()
} else {
message.error(result.message || '删除失败')
}
@@ -799,10 +1908,58 @@ watch(detailTab, (tab) => {
if (tab === 'tools' && server.value) {
fetchTools()
}
+ if (tab === 'connections' && server.value) {
+ fetchConnections()
+ }
+})
+
+watch(connectionFilter, () => {
+ if (detailTab.value !== 'connections') return
+ if (connectionPage.value === 1) {
+ fetchConnections()
+ } else {
+ connectionPage.value = 1
+ }
})
+watch(connectionSearchText, () => {
+ if (connectionSearchTimer) {
+ clearTimeout(connectionSearchTimer)
+ }
+ connectionSearchTimer = setTimeout(() => {
+ if (detailTab.value !== 'connections') return
+ if (connectionPage.value === 1) {
+ fetchConnections()
+ } else {
+ connectionPage.value = 1
+ }
+ }, 300)
+})
+
+watch([connectionPage, connectionPageSize], () => {
+ if (detailTab.value !== 'connections') return
+ fetchConnections()
+})
+
+const loadScopeOptions = async () => {
+ try {
+ isFetchingScopeOptions.value = true
+ const [usersRes, deptsRes] = await Promise.all([
+ userApi.getUsers(),
+ departmentApi.getDepartments()
+ ])
+ userList.value = usersRes || []
+ departmentList.value = deptsRes || []
+ } catch (err) {
+ message.error('获取用户/部门列表失败: ' + err.message)
+ } finally {
+ isFetchingScopeOptions.value = false
+ }
+}
+
onMounted(() => {
fetchServer()
+ loadScopeOptions()
})
@@ -1131,6 +2288,398 @@ onMounted(() => {
}
.mcp-detail {
+ .connections-tab {
+ display: flex;
+ flex-direction: column;
+ gap: 14px;
+ }
+
+ .connection-command-bar {
+ display: flex;
+ justify-content: space-between;
+ gap: 16px;
+ align-items: center;
+ padding: 16px;
+ border: 1px solid var(--gray-150);
+ border-radius: 8px;
+ background: var(--gray-0);
+ }
+
+ .connection-command-copy {
+ min-width: 0;
+
+ h3 {
+ margin: 0 0 4px;
+ color: var(--gray-900);
+ font-size: 16px;
+ font-weight: 600;
+ }
+
+ p {
+ margin: 0;
+ color: var(--gray-500);
+ font-size: 13px;
+ line-height: 1.5;
+ }
+ }
+
+ .connection-summary-strip {
+ display: grid;
+ grid-template-columns: repeat(4, minmax(0, 1fr));
+ border: 1px solid var(--gray-150);
+ border-radius: 8px;
+ overflow: hidden;
+ background: var(--gray-0);
+ }
+
+ .connection-summary-item {
+ display: flex;
+ flex-direction: column;
+ gap: 4px;
+ padding: 12px 14px;
+
+ & + .connection-summary-item {
+ border-left: 1px solid var(--gray-100);
+ }
+
+ .summary-label {
+ color: var(--gray-500);
+ font-size: 12px;
+ }
+
+ strong {
+ min-width: 0;
+ overflow: hidden;
+ text-overflow: ellipsis;
+ white-space: nowrap;
+ color: var(--gray-900);
+ font-size: 15px;
+ font-weight: 600;
+ }
+ }
+
+ .connection-list-toolbar {
+ position: sticky;
+ top: 0;
+ z-index: 5;
+ display: flex;
+ align-items: center;
+ justify-content: space-between;
+ gap: 12px;
+ padding: 12px;
+ border: 1px solid var(--gray-150);
+ border-radius: 8px;
+ background: var(--gray-0);
+ }
+
+ .connection-filter-group,
+ .connection-page-controls {
+ min-width: 0;
+ display: flex;
+ align-items: center;
+ gap: 12px;
+ }
+
+ .connection-filter-group {
+ flex: 1;
+ }
+
+ .connection-page-controls {
+ flex-shrink: 0;
+ justify-content: flex-end;
+ }
+
+ .connection-result-count {
+ color: var(--gray-500);
+ font-size: 12px;
+ white-space: nowrap;
+ }
+
+ .connection-search-input {
+ width: min(320px, 100%);
+
+ :deep(.ant-input-prefix) {
+ color: var(--gray-500);
+ }
+ }
+
+ .connection-empty-state {
+ display: flex;
+ flex-direction: column;
+ align-items: center;
+ gap: 12px;
+ padding: 42px 16px;
+ border: 1px solid var(--gray-150);
+ border-radius: 8px;
+ background: var(--gray-0);
+ }
+
+ .connection-list-body {
+ display: flex;
+ flex-direction: column;
+ gap: 12px;
+ }
+
+ .connection-cards-grid {
+ display: grid;
+ grid-template-columns: repeat(auto-fill, minmax(340px, 1fr));
+ gap: 12px;
+ }
+
+ .connection-card {
+ padding: 12px;
+ border: 1px solid var(--gray-150);
+ border-radius: 8px;
+ background: var(--gray-0);
+ transition:
+ border-color 0.2s,
+ box-shadow 0.2s;
+
+ &:hover {
+ border-color: var(--gray-300);
+ }
+ }
+
+ .connection-card-header {
+ display: flex;
+ align-items: center;
+ justify-content: space-between;
+ gap: 12px;
+ margin-bottom: 10px;
+ }
+
+ .connection-key-info {
+ min-width: 0;
+ flex: 1;
+ display: flex;
+ align-items: center;
+ gap: 10px;
+ }
+
+ .connection-key-icon {
+ color: var(--main-600);
+ flex-shrink: 0;
+ }
+
+ .connection-key-copy {
+ min-width: 0;
+
+ h4 {
+ margin: 0;
+ overflow: hidden;
+ color: var(--gray-900);
+ font-size: 14px;
+ font-weight: 600;
+ line-height: 1.4;
+ text-overflow: ellipsis;
+ white-space: nowrap;
+ }
+
+ span {
+ display: block;
+ margin-top: 2px;
+ overflow: hidden;
+ color: var(--gray-500);
+ font-size: 12px;
+ line-height: 1.4;
+ text-overflow: ellipsis;
+ white-space: nowrap;
+ }
+ }
+
+ .connection-scope-badge {
+ display: inline-flex;
+ align-items: center;
+ justify-content: center;
+ height: 28px;
+ flex-shrink: 0;
+ gap: 5px;
+ padding: 0 10px;
+ border: 1px solid var(--gray-150);
+ border-radius: 7px;
+ background: var(--gray-25);
+ color: var(--gray-700);
+ font-size: 12px;
+ font-weight: 500;
+ line-height: 1;
+ white-space: nowrap;
+
+ &.scope-system {
+ border-color: var(--color-success-100);
+ background: var(--color-success-50);
+ color: var(--color-success-700);
+ }
+
+ &.scope-department {
+ border-color: var(--color-accent-100);
+ background: var(--color-accent-50);
+ color: var(--color-accent-700);
+ }
+
+ &.scope-user {
+ border-color: var(--color-info-100);
+ background: var(--color-info-50);
+ color: var(--color-info-700);
+ }
+
+ &.is-mismatch {
+ border-color: var(--color-warning-100);
+ background: var(--color-warning-50);
+ color: var(--color-warning-900);
+ }
+ }
+
+ .connection-card-content {
+ margin-bottom: 10px;
+ }
+
+ .connection-issue {
+ display: flex;
+ align-items: center;
+ justify-content: space-between;
+ gap: 10px;
+ margin-bottom: 10px;
+ padding: 9px 10px;
+ border: 1px solid var(--gray-150);
+ border-radius: 8px;
+ background: var(--gray-25);
+
+ &.issue-warning {
+ border-color: var(--color-warning-100);
+ background: var(--color-warning-10);
+
+ .issue-copy span {
+ color: var(--color-warning-900);
+ }
+ }
+
+ &.issue-error {
+ border-color: var(--color-error-100);
+ background: var(--color-error-10);
+
+ .issue-copy span {
+ color: var(--color-error-700);
+ }
+ }
+ }
+
+ .issue-copy {
+ min-width: 0;
+ display: flex;
+ flex-direction: column;
+ gap: 2px;
+
+ span {
+ font-size: 13px;
+ font-weight: 600;
+ line-height: 1.4;
+ }
+
+ small {
+ overflow: hidden;
+ color: var(--gray-600);
+ font-size: 12px;
+ line-height: 1.4;
+ text-overflow: ellipsis;
+ white-space: nowrap;
+ }
+ }
+
+ .issue-action {
+ flex-shrink: 0;
+ padding: 0;
+ font-size: 12px;
+ font-weight: 500;
+ }
+
+ .connection-info-item {
+ display: flex;
+ align-items: flex-start;
+ gap: 6px;
+ margin-bottom: 6px;
+ color: var(--gray-900);
+ font-size: 13px;
+
+ &:last-child {
+ margin-bottom: 0;
+ }
+
+ .info-label {
+ color: var(--gray-600);
+ flex-shrink: 0;
+ }
+
+ .info-value {
+ min-width: 0;
+ color: var(--gray-900);
+ word-break: break-all;
+ }
+ }
+
+ .connection-card-footer {
+ display: flex;
+ align-items: center;
+ justify-content: space-between;
+ gap: 10px;
+ padding-top: 8px;
+ border-top: 1px solid var(--gray-100);
+ }
+
+ .footer-left {
+ display: flex;
+ align-items: center;
+ gap: 8px;
+ flex-shrink: 0;
+ }
+
+ .switch-label {
+ color: var(--gray-600);
+ font-size: 12px;
+ }
+
+ .status-switch-wrap {
+ display: inline-flex;
+ align-items: center;
+ }
+
+ .connection-row-actions {
+ display: flex;
+ flex-wrap: wrap;
+ justify-content: flex-end;
+ gap: 4px;
+ }
+
+ .connection-action-wrap {
+ display: inline-flex;
+ }
+
+ .connection-action-btn {
+ display: inline-flex;
+ align-items: center;
+ gap: 4px;
+ color: var(--gray-700);
+ font-size: 12px;
+
+ &:hover {
+ color: var(--main-600);
+ }
+ }
+
+ .danger-action-btn {
+ color: var(--color-error-700);
+
+ &:hover {
+ background: var(--color-error-50);
+ color: var(--color-error-900);
+ }
+ }
+
+ .connection-pagination {
+ display: flex;
+ justify-content: flex-end;
+ padding-top: 2px;
+ }
+
.detail-content-wrapper {
flex: 1;
min-height: 0;
@@ -1139,9 +2688,216 @@ onMounted(() => {
}
.detail-content-inner {
- max-width: 900px;
+ max-width: 1120px;
margin: 0 auto;
padding: 16px var(--page-padding);
}
}
+
+.connection-drawer-form {
+ display: flex;
+ min-height: 100%;
+ flex-direction: column;
+ padding: 18px 20px 0;
+
+ :deep(.ant-form-item) {
+ margin-bottom: 0;
+ }
+
+ :deep(.ant-form-item-label > label) {
+ color: var(--gray-700);
+ font-size: 13px;
+ font-weight: 500;
+ }
+}
+
+.drawer-section {
+ display: flex;
+ flex-direction: column;
+ gap: 14px;
+ padding-bottom: 18px;
+
+ & + .drawer-section {
+ padding-top: 18px;
+ border-top: 1px solid var(--gray-100);
+ }
+}
+
+.drawer-section-title {
+ display: flex;
+ flex-direction: column;
+ gap: 3px;
+
+ span {
+ color: var(--gray-900);
+ font-size: 14px;
+ font-weight: 600;
+ }
+
+ small {
+ color: var(--gray-500);
+ font-size: 12px;
+ line-height: 1.5;
+ }
+}
+
+.scope-option-grid {
+ display: grid;
+ grid-template-columns: repeat(auto-fit, minmax(136px, 1fr));
+ gap: 8px;
+}
+
+.scope-option {
+ display: flex;
+ min-height: 78px;
+ flex-direction: column;
+ align-items: flex-start;
+ justify-content: center;
+ gap: 4px;
+ padding: 10px 12px;
+ border: 1px solid var(--gray-150);
+ border-radius: 8px;
+ background: var(--gray-0);
+ color: var(--gray-700);
+ cursor: pointer;
+ text-align: left;
+ transition:
+ border-color 0.15s ease,
+ background-color 0.15s ease,
+ color 0.15s ease;
+
+ span {
+ color: var(--gray-900);
+ font-size: 13px;
+ font-weight: 600;
+ }
+
+ small {
+ color: var(--gray-500);
+ font-size: 12px;
+ }
+
+ &:hover:not(:disabled) {
+ border-color: var(--main-300);
+ background: var(--main-10);
+ color: var(--main-color);
+ }
+
+ &.active {
+ border-color: var(--main-color);
+ background: var(--main-30);
+ color: var(--main-color);
+ }
+
+ &:disabled {
+ cursor: not-allowed;
+ opacity: 0.7;
+ }
+}
+
+.secret-field-grid {
+ display: grid;
+ grid-template-columns: repeat(auto-fit, minmax(220px, 1fr));
+ gap: 12px;
+}
+
+.connection-advanced-collapse {
+ margin: 0 -4px 12px;
+
+ :deep(.ant-collapse-header) {
+ padding: 10px 4px;
+ color: var(--gray-600);
+ font-size: 13px;
+ }
+
+ :deep(.ant-collapse-content-box) {
+ display: flex;
+ flex-direction: column;
+ gap: 14px;
+ padding: 4px 4px 12px;
+ }
+}
+
+.connection-drawer-footer {
+ position: sticky;
+ bottom: 0;
+ display: flex;
+ justify-content: flex-end;
+ gap: 8px;
+ margin: auto -20px 0;
+ padding: 14px 20px;
+ border-top: 1px solid var(--gray-100);
+ background: var(--gray-0);
+}
+
+@media (max-width: 980px) {
+ .mcp-detail {
+ .connection-list-toolbar {
+ align-items: flex-start;
+ flex-direction: column;
+ }
+
+ .connection-filter-group,
+ .connection-page-controls {
+ width: 100%;
+ justify-content: space-between;
+ }
+
+ .connection-filter-group {
+ align-items: flex-start;
+ flex-direction: column;
+ }
+
+ .connection-search-input {
+ width: 100%;
+ }
+
+ .connection-summary-strip {
+ grid-template-columns: repeat(2, minmax(0, 1fr));
+ }
+
+ .connection-summary-item:nth-child(3) {
+ border-left: 0;
+ border-top: 1px solid var(--gray-100);
+ }
+
+ .connection-summary-item:nth-child(4) {
+ border-top: 1px solid var(--gray-100);
+ }
+
+ .connection-row-actions {
+ justify-content: flex-start;
+ }
+
+ .connection-card-footer {
+ align-items: flex-start;
+ flex-direction: column;
+ }
+ }
+}
+
+@media (max-width: 640px) {
+ .mcp-detail {
+ .connection-command-bar {
+ align-items: flex-start;
+ flex-direction: column;
+ }
+
+ .connection-issue {
+ align-items: flex-start;
+ flex-direction: column;
+ }
+
+ .connection-pagination {
+ justify-content: flex-start;
+ }
+
+ .connection-summary-strip,
+ .connection-cards-grid,
+ .scope-option-grid,
+ .secret-field-grid {
+ grid-template-columns: 1fr;
+ }
+ }
+}
diff --git a/web/src/components/extensions/McpFormModal.vue b/web/src/components/extensions/McpFormModal.vue
index 5206170de..4f96eaf7a 100644
--- a/web/src/components/extensions/McpFormModal.vue
+++ b/web/src/components/extensions/McpFormModal.vue
@@ -6,7 +6,7 @@
:confirmLoading="formLoading"
@cancel="visible = false"
:maskClosable="false"
- width="560px"
+ width="min(780px, calc(100vw - 32px))"
class="server-modal"
>
@@ -93,6 +93,7 @@
+
{
args: obj.args || [],
env: obj.env || null,
headersText: obj.headers ? JSON.stringify(obj.headers, null, 2) : '',
+ authConfigText: obj.auth_config ? JSON.stringify(obj.auth_config, null, 2) : '',
timeout: obj.timeout || null,
sse_read_timeout: obj.sse_read_timeout || null,
tags: obj.tags || [],
@@ -259,6 +267,16 @@ const handleFormSubmit = async () => {
return
}
}
+
+ let authConfig = null
+ if (form.authConfigText.trim()) {
+ try {
+ authConfig = JSON.parse(form.authConfigText)
+ } catch {
+ message.error('认证配置 JSON 格式错误')
+ return
+ }
+ }
data = {
name: form.name,
description: form.description || null,
@@ -268,6 +286,7 @@ const handleFormSubmit = async () => {
args: form.args.length > 0 ? form.args : null,
env: form.env,
headers,
+ auth_config: authConfig,
timeout: form.timeout || null,
sse_read_timeout: form.sse_read_timeout || null,
tags: form.tags.length > 0 ? form.tags : null,
diff --git a/web/src/layouts/AppLayout.vue b/web/src/layouts/AppLayout.vue
index ff00aeb48..3a19393d7 100644
--- a/web/src/layouts/AppLayout.vue
+++ b/web/src/layouts/AppLayout.vue
@@ -55,14 +55,21 @@ const showDebugModal = ref(false)
// Add state for settings modal
const showSettingsModal = ref(false)
+const settingsInitialTab = ref(null)
const { sidebarCollapsed } = storeToRefs(chatUIStore)
// Provide settings modal methods to child components
-const openSettingsModal = () => {
+const openSettingsModal = (initialTab = null) => {
+ settingsInitialTab.value = initialTab
showSettingsModal.value = true
}
+const closeSettingsModal = () => {
+ showSettingsModal.value = false
+ settingsInitialTab.value = null
+}
+
// Handle debug modal close
const handleDebugModalClose = () => {
showDebugModal.value = false
@@ -387,7 +394,11 @@ provide('settingsModal', {
-
+
diff --git a/web/src/utils/__tests__/mcpAuthConfigBuilder.test.js b/web/src/utils/__tests__/mcpAuthConfigBuilder.test.js
new file mode 100644
index 000000000..f1f83df9e
--- /dev/null
+++ b/web/src/utils/__tests__/mcpAuthConfigBuilder.test.js
@@ -0,0 +1,84 @@
+import assert from 'node:assert/strict'
+
+import {
+ authConfigToBuilderForm,
+ buildAuthConfigFromBuilderForm,
+ createDefaultAuthBuilderForm,
+ extractSecretFieldNames
+} from '../mcpAuthConfigBuilder.js'
+
+const run = () => {
+ {
+ const form = createDefaultAuthBuilderForm()
+ assert.equal(buildAuthConfigFromBuilderForm(form), null)
+ }
+
+ {
+ const form = createDefaultAuthBuilderForm('custom_http_token')
+ form.bindingScope = 'department'
+ form.injectEntries = [
+ { name: 'Authorization', value_template: 'Bearer ${access_token}' },
+ { name: 'X-Yuxi-User', value_template: '${context.user_id}' }
+ ]
+ form.tokenUrl = 'http://internal-gateway/token'
+ form.tokenHeaders = [{ key: 'Content-Type', value: 'application/json' }]
+ form.tokenBodyTemplate = [
+ { key: 'client_id', value: '${secret.client_id}' },
+ { key: 'client_secret', value: '${secret.client_secret}' },
+ { key: 'user_id', value: '${context.user_id}' }
+ ]
+ form.tokenResponseMap = [
+ { key: 'access_token', value: 'data.access_token' },
+ { key: 'expires_in', value: 'data.expires_in' }
+ ]
+
+ const config = buildAuthConfigFromBuilderForm(form)
+ assert.equal(config.provider, 'custom_http_token')
+ assert.equal(config.binding_scope, 'department')
+ assert.equal(config.manifest_scope, 'binding')
+ assert.deepEqual(config.inject.entries, form.injectEntries)
+ assert.deepEqual(config.token_request, {
+ url: 'http://internal-gateway/token',
+ method: 'POST',
+ body_type: 'json',
+ headers: { 'Content-Type': 'application/json' },
+ body_template: {
+ client_id: '${secret.client_id}',
+ client_secret: '${secret.client_secret}',
+ user_id: '${context.user_id}'
+ },
+ response_map: {
+ access_token: 'data.access_token',
+ expires_in: 'data.expires_in'
+ }
+ })
+ assert.deepEqual(extractSecretFieldNames(config), ['client_id', 'client_secret'])
+ }
+
+ {
+ const config = {
+ version: 1,
+ provider: 'bound_secret',
+ binding_scope: 'user',
+ manifest_scope: 'binding',
+ inject: {
+ target: 'headers',
+ entries: [{ name: 'X-Api-Key', value_template: '${secret.api_key}' }]
+ },
+ refresh_policy: {
+ pre_refresh_seconds: 120,
+ retry_once_on_401: false
+ }
+ }
+
+ const form = authConfigToBuilderForm(config)
+ assert.equal(form.provider, 'bound_secret')
+ assert.equal(form.bindingScope, 'user')
+ assert.deepEqual(form.injectEntries, [{ name: 'X-Api-Key', value_template: '${secret.api_key}' }])
+ assert.deepEqual(buildAuthConfigFromBuilderForm(form), config)
+ }
+
+ console.log('mcpAuthConfigBuilder: all assertions passed')
+}
+
+run()
diff --git a/web/src/utils/mcpAuthConfigBuilder.js b/web/src/utils/mcpAuthConfigBuilder.js
new file mode 100644
index 000000000..eeafc252e
--- /dev/null
+++ b/web/src/utils/mcpAuthConfigBuilder.js
@@ -0,0 +1,206 @@
+export const FORM_AUTH_PROVIDERS = new Set([
+ 'bound_secret',
+ 'custom_http_token',
+ 'client_credentials',
+ 'stdio_env'
+])
+
+const TOKEN_PROVIDERS = new Set(['custom_http_token', 'client_credentials'])
+
+const DEFAULT_RESPONSE_MAP = [
+ { key: 'access_token', value: 'data.access_token' },
+ { key: 'refresh_token', value: 'data.refresh_token' },
+ { key: 'expires_in', value: 'data.expires_in' }
+]
+
+const DEFAULT_JSON_HEADERS = [{ key: 'Content-Type', value: 'application/json' }]
+
+const DEFAULT_FORM_HEADERS = [
+ { key: 'Content-Type', value: 'application/x-www-form-urlencoded' }
+]
+
+const DEFAULT_GATEWAY_BODY = [
+ { key: 'client_id', value: '${secret.client_id}' },
+ { key: 'client_secret', value: '${secret.client_secret}' },
+ { key: 'user_id', value: '${context.user_id}' },
+ { key: 'department_id', value: '${context.department_id}' }
+]
+
+const DEFAULT_CLIENT_CREDENTIALS_BODY = [
+ { key: 'grant_type', value: 'client_credentials' },
+ { key: 'client_id', value: '${secret.client_id}' },
+ { key: 'client_secret', value: '${secret.client_secret}' }
+]
+
+const normalizeText = (value) => String(value ?? '').trim()
+
+export const objectToKeyValueRows = (value, fallbackRows = [{ key: '', value: '' }]) => {
+ if (!value || typeof value !== 'object' || Array.isArray(value)) {
+ return fallbackRows.map((row) => ({ ...row }))
+ }
+
+ const rows = Object.entries(value).map(([key, rowValue]) => ({
+ key,
+ value: rowValue == null ? '' : String(rowValue)
+ }))
+ return rows.length > 0 ? rows : fallbackRows.map((row) => ({ ...row }))
+}
+
+export const keyValueRowsToObject = (rows) => {
+ const entries = (Array.isArray(rows) ? rows : [])
+ .map((row) => ({
+ key: normalizeText(row?.key),
+ value: row?.value == null ? '' : String(row.value)
+ }))
+ .filter((row) => row.key)
+
+ if (entries.length === 0) {
+ return {}
+ }
+ return Object.fromEntries(entries.map((row) => [row.key, row.value]))
+}
+
+const createDefaultInjectEntries = (provider) => {
+ if (provider === 'stdio_env') {
+ return [{ name: 'MCP_ACCESS_TOKEN', value_template: '${secret.access_token}' }]
+ }
+ if (provider === 'bound_secret') {
+ return [{ name: 'Authorization', value_template: 'Bearer ${secret.access_token}' }]
+ }
+ return [{ name: 'Authorization', value_template: 'Bearer ${access_token}' }]
+}
+
+export const createDefaultAuthBuilderForm = (provider = 'none') => {
+ const normalizedProvider = provider === 'none' ? 'none' : provider
+ const isClientCredentials = normalizedProvider === 'client_credentials'
+ const isEnvProvider = normalizedProvider === 'stdio_env'
+
+ return {
+ provider: normalizedProvider,
+ bindingScope: 'department',
+ manifestScope: 'binding',
+ injectTarget: isEnvProvider ? 'env' : 'headers',
+ injectEntries:
+ normalizedProvider === 'none' ? [] : createDefaultInjectEntries(normalizedProvider),
+ preRefreshSeconds: TOKEN_PROVIDERS.has(normalizedProvider) ? 300 : 0,
+ retryOnceOn401: TOKEN_PROVIDERS.has(normalizedProvider),
+ tokenUrl: '',
+ tokenMethod: 'POST',
+ tokenBodyType: isClientCredentials ? 'form' : 'json',
+ tokenHeaders: isClientCredentials ? DEFAULT_FORM_HEADERS.map((row) => ({ ...row })) : DEFAULT_JSON_HEADERS.map((row) => ({ ...row })),
+ tokenBodyTemplate: isClientCredentials
+ ? DEFAULT_CLIENT_CREDENTIALS_BODY.map((row) => ({ ...row }))
+ : DEFAULT_GATEWAY_BODY.map((row) => ({ ...row })),
+ tokenResponseMap: DEFAULT_RESPONSE_MAP.map((row) => ({ ...row }))
+ }
+}
+
+export const isAuthConfigSupportedByBuilder = (config) => {
+ if (!config || Object.keys(config).length === 0) {
+ return true
+ }
+ return FORM_AUTH_PROVIDERS.has(config.provider)
+}
+
+export const authConfigToBuilderForm = (config) => {
+ if (!config || Object.keys(config).length === 0) {
+ return createDefaultAuthBuilderForm()
+ }
+
+ const provider = FORM_AUTH_PROVIDERS.has(config.provider) ? config.provider : 'custom_http_token'
+ const form = createDefaultAuthBuilderForm(provider)
+ const tokenRequest = config.token_request || {}
+
+ form.bindingScope = config.binding_scope || form.bindingScope
+ form.manifestScope = config.manifest_scope || form.manifestScope
+ form.injectTarget = config.inject?.target || form.injectTarget
+ form.injectEntries =
+ Array.isArray(config.inject?.entries) && config.inject.entries.length > 0
+ ? config.inject.entries.map((entry) => ({
+ name: entry.name || '',
+ value_template: entry.value_template || ''
+ }))
+ : form.injectEntries
+ form.preRefreshSeconds =
+ Number.isFinite(Number(config.refresh_policy?.pre_refresh_seconds))
+ ? Number(config.refresh_policy.pre_refresh_seconds)
+ : form.preRefreshSeconds
+ form.retryOnceOn401 =
+ typeof config.refresh_policy?.retry_once_on_401 === 'boolean'
+ ? config.refresh_policy.retry_once_on_401
+ : form.retryOnceOn401
+ form.tokenUrl = tokenRequest.url || ''
+ form.tokenMethod = tokenRequest.method || form.tokenMethod
+ form.tokenBodyType = tokenRequest.body_type || form.tokenBodyType
+ form.tokenHeaders = objectToKeyValueRows(tokenRequest.headers, form.tokenHeaders)
+ form.tokenBodyTemplate = objectToKeyValueRows(tokenRequest.body_template, form.tokenBodyTemplate)
+ form.tokenResponseMap = objectToKeyValueRows(tokenRequest.response_map, form.tokenResponseMap)
+
+ return form
+}
+
+const normalizeInjectEntries = (entries) =>
+ (Array.isArray(entries) ? entries : [])
+ .map((entry) => ({
+ name: normalizeText(entry?.name),
+ value_template: String(entry?.value_template ?? '').trim()
+ }))
+ .filter((entry) => entry.name)
+
+export const buildAuthConfigFromBuilderForm = (form) => {
+ if (!form || form.provider === 'none') {
+ return null
+ }
+
+ const provider = FORM_AUTH_PROVIDERS.has(form.provider) ? form.provider : 'custom_http_token'
+ const config = {
+ version: 1,
+ provider,
+ binding_scope: form.bindingScope || 'department',
+ manifest_scope: form.manifestScope || 'binding',
+ inject: {
+ target: form.injectTarget || 'headers',
+ entries: normalizeInjectEntries(form.injectEntries)
+ },
+ refresh_policy: {
+ pre_refresh_seconds: Number(form.preRefreshSeconds) || 0,
+ retry_once_on_401: Boolean(form.retryOnceOn401)
+ }
+ }
+
+ if (TOKEN_PROVIDERS.has(provider)) {
+ config.token_request = {
+ url: normalizeText(form.tokenUrl),
+ method: normalizeText(form.tokenMethod || 'POST').toUpperCase(),
+ body_type: form.tokenBodyType || 'json',
+ headers: keyValueRowsToObject(form.tokenHeaders),
+ body_template: keyValueRowsToObject(form.tokenBodyTemplate),
+ response_map: keyValueRowsToObject(form.tokenResponseMap)
+ }
+ }
+
+ return config
+}
+
+export const extractSecretFieldNames = (value, fields = new Set()) => {
+ if (typeof value === 'string') {
+ const pattern = /\$\{secret\.([^}]+)\}/g
+ let match = pattern.exec(value)
+ while (match) {
+ fields.add(match[1])
+ match = pattern.exec(value)
+ }
+ return [...fields]
+ }
+
+ if (Array.isArray(value)) {
+ value.forEach((item) => extractSecretFieldNames(item, fields))
+ return [...fields]
+ }
+
+ if (value && typeof value === 'object') {
+ Object.values(value).forEach((item) => extractSecretFieldNames(item, fields))
+ }
+
+ return [...fields]
+}