Authentication and authorization for MCP servers

Verify an incoming bearer token and read the caller's identity.

import { AuthdogVerifier, AuthenticationError, APIError } from '@authdog/mcp-sdk';

// Initialize the verifier
const verifier = new AuthdogVerifier({
  baseUrl: 'https://api.authdog.com',
  timeout: 10000, // Optional, defaults to 10 seconds
});

// Verify an incoming bearer token
try {
  const authInfo = await verifier.verifyToken('the-access-token');
  console.log(`Subject: ${authInfo.subject}`);
  console.log(`Username: ${authInfo.username}`);
  console.log(`Email: ${authInfo.email}`);
  console.log(`Scopes: ${authInfo.scopes.join(', ')}`);
  console.log(`Expires at: ${authInfo.expiresAt?.toISOString() ?? 'unknown'}`);
} catch (error) {
  if (error instanceof AuthenticationError) {
    console.error('Authentication failed:', error.message);
  } else if (error instanceof APIError) {
    console.error('API error:', error.message);
  } else {
    console.error('Unexpected error:', error);
  }
}