mirror of
https://github.com/kuhyx/todo-app.git
synced 2026-11-10 20:27:01 +01:00
Krzysztof kuhy Rudnicki
d09978a338
Some checks are pending
dependency freshness / dependencies on newest stable (push) Waiting to run
file-length / file length <= 250 lines (push) Waiting to run
md-naming / markdown naming convention (push) Waiting to run
release-apk / release (APK) (push) Waiting to run
repo-contract / repo contract (push) Waiting to run
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WzxdWVUTaKFW8m7YrvWbzV
54 lines
1.8 KiB
Python
54 lines
1.8 KiB
Python
# Copyright (c) 2026 Krzysztof Rudnicki
|
|
"""verify_mcp.py against a fake Streamable HTTP server (no live state)."""
|
|
|
|
from __future__ import annotations
|
|
|
|
import json
|
|
import threading
|
|
from http.server import BaseHTTPRequestHandler, HTTPServer
|
|
from pathlib import Path
|
|
|
|
import verify_mcp
|
|
|
|
|
|
class _Fake(BaseHTTPRequestHandler):
|
|
def do_POST(self) -> None:
|
|
body = json.loads(self.rfile.read(int(self.headers["Content-Length"])))
|
|
if self.headers.get("Authorization") != "Bearer good":
|
|
self.send_response(401)
|
|
self.end_headers()
|
|
return
|
|
self.send_response(200)
|
|
self.send_header("Mcp-Session-Id", "s1")
|
|
self.send_header("Content-Type", "text/event-stream")
|
|
self.end_headers()
|
|
if "id" in body:
|
|
reply = {"jsonrpc": "2.0", "id": body["id"], "result": {"content": []}}
|
|
self.wfile.write(f"event: message\ndata: {json.dumps(reply)}\n\n".encode())
|
|
|
|
def log_message(self, *_args: object) -> None:
|
|
return
|
|
|
|
|
|
def _serve() -> tuple[HTTPServer, str]:
|
|
server = HTTPServer(("127.0.0.1", 0), _Fake)
|
|
threading.Thread(target=server.serve_forever, daemon=True).start()
|
|
return server, f"http://127.0.0.1:{server.server_port}/mcp"
|
|
|
|
|
|
def test_good_token_passes_and_missing_token_is_401(tmp_path: Path) -> None:
|
|
server, url = _serve()
|
|
token = tmp_path / "t"
|
|
token.write_text("good\n")
|
|
assert verify_mcp.run([url, "--token-file", str(token)]) == 0
|
|
assert verify_mcp.run([url, "--expect-401"]) == 0
|
|
server.shutdown()
|
|
|
|
|
|
def test_bad_token_fails_and_expect_401_fails_when_open(tmp_path: Path) -> None:
|
|
server, url = _serve()
|
|
token = tmp_path / "t"
|
|
token.write_text("bad\n")
|
|
assert verify_mcp.run([url, "--token-file", str(token)]) == 1
|
|
server.shutdown()
|