AWS Cognito Integration

import { AuthProvider } from "@leanmcp/auth";

// Initialize authentication provider
// The API key is used by the SDK to authorize verification of user tokens
export const authProvider = new AuthProvider('leanmcp', {
    apiKey: process.env.LEANMCP_API_KEY,
    orchestrationApiUrl: 'http://localhost:3001',
    authUrl: 'http://localhost:3003'
});

// Initialize the provider
await authProvider.init();

import { Tool, SchemaConstraint } from "@leanmcp/core";
import { Authenticated } from "@leanmcp/auth";
import { authProvider } from "../config.js";

class EchoInput {
    @SchemaConstraint({
        description: 'Message to echo back',
        minLength: 1
    })
    message!: string;
}

class RefreshTokenInput {
    @SchemaConstraint({
        description: 'The refresh token to use for obtaining a new ID token',
        minLength: 1
    })
    refreshToken!: string;
}

export class DemoService {
    /**
     * Get the authenticated user's profile
     */
    @Authenticated(authProvider)
    @Tool({
        description: 'Get the authenticated user profile information'
    })
    async getUserProfile(): Promise<{
        userId: string;
        email: string;
        name?: string;
        picture?: string;
    }> {
        // authUser is automatically available - injected by @Authenticated decorator
        return {
            userId: authUser.uid || authUser.sub,
            email: authUser.email,
            name: authUser.name,
            picture: authUser.picture
        };
    }

    /**
     * Echo back a message with user information
     */
    @Tool({
        description: 'Echo back a message with authenticated user information',
        inputClass: EchoInput
    })
    async echo(args: EchoInput): Promise<{
        message: string;
        timestamp: string;
        userId: string;
        userEmail: string;
    }> {
        return {
            message: args.message,
            timestamp: new Date().toISOString(),
            userId: authUser.uid || authUser.sub,
            userEmail: authUser.email
        };
    }

    /**
     * Refresh a user token
     * This tool is NOT protected by authentication
     */
    @Tool({
        description: 'Refresh a user token using a refresh token',
        inputClass: RefreshTokenInput,
    })
    async refreshToken(args: RefreshTokenInput): Promise<any> {
        return await authProvider.refreshToken(args.refreshToken);
    }
}

import 'dotenv/config';
import { createHTTPServer } from "@leanmcp/core";

await createHTTPServer({
  name: 'leanmcp-auth',
  version: '1.0.0',
  port: parseInt(process.env.PORT || '3000'),
  cors: true,
  logging: true
});

console.log('\nLeanMCP Auth Server Example');