(request: Request, result: McpAuthResult)
| 246 | }); |
| 247 | |
| 248 | const toOutcome = (request: Request, result: McpAuthResult): Effect.Effect<AuthOutcome> => { |
| 249 | if (Predicate.isTagged(result, "Authorized")) { |
| 250 | return finishAuthorized(request, result.token); |
| 251 | } |
| 252 | return annotateMcpRequest(request, { |
| 253 | token: null, |
| 254 | parseBody: false, |
| 255 | }).pipe( |
| 256 | Effect.as( |
| 257 | unauthorized( |
| 258 | bearerChallengeFor( |
| 259 | result, |
| 260 | mcpOrganizationFromRequest(request), |
| 261 | toolkitSlugFromRequest(request), |
| 262 | ), |
| 263 | ), |
| 264 | ), |
| 265 | ); |
| 266 | }; |
| 267 | |
| 268 | /** |
| 269 | * Never fails: a transient JWKS-infra failure (the McpJwtVerificationError |
no test coverage detected