Use server.config settings by default in run_example.sh (#4)

Changed run_example.sh to use server.config settings instead of
forcing --no-auth mode. Auth behavior is now controlled by the
auth_disabled setting in server.config.

Author: RahulHere

build.sh

@@ -244,8 +244,8 @@ echo -e "${GREEN}Run examples:${NC}"
 echo -e "  ${YELLOW}python3 examples/client_example.py${NC}"
 echo ""
 echo -e "${GREEN}Run Auth MCP Server example:${NC}"
-echo -e "  ${YELLOW}cd examples/auth && ./run_example.sh${NC}           # Development mode (no auth)"
-echo -e "  ${YELLOW}cd examples/auth && ./run_example.sh --no-auth${NC} # Explicit no-auth mode"
+echo -e "  ${YELLOW}cd examples/auth && ./run_example.sh${NC}           # Uses server.config settings"
+echo -e "  ${YELLOW}cd examples/auth && ./run_example.sh --no-auth${NC} # Override to disable auth"
 echo -e "  ${YELLOW}cd examples/auth && ./run_example.sh --help${NC}    # Show all options"
 echo ""
 echo -e "  Test endpoints:"

examples/auth/run_example.sh

@@ -23,17 +23,17 @@ if [ "$1" = "--help" ] || [ "$1" = "-h" ]; then
     echo "Auth MCP Server Example"
     echo ""
     echo "Usage:"
-    echo "  ./run_example.sh           Run with auth enabled (requires OAuth config)"
-    echo "  ./run_example.sh --no-auth Run without auth (development mode)"
+    echo "  ./run_example.sh           Run using server.config settings"
+    echo "  ./run_example.sh --no-auth Override config to disable auth"
     echo "  ./run_example.sh --help    Show this help"
     echo ""
     echo "Options:"
-    echo "  --no-auth    Disable OAuth authentication (for development/testing)"
+    echo "  --no-auth    Disable OAuth authentication (overrides server.config)"
     echo "  --host HOST  Bind to specific host (default: 0.0.0.0)"
     echo "  --port PORT  Listen on specific port (default: 3001)"
     echo ""
     echo "Configuration:"
-    echo "  Edit server.config to configure OAuth settings"
+    echo "  Edit server.config to configure OAuth settings (auth_disabled=true/false)"
     echo "  See server.config.example for all available options"
     echo ""
     echo "Test endpoints:"
@@ -79,13 +79,8 @@ if [ -d "${NATIVE_LIB}" ]; then
 fi
 
 echo -e "${GREEN}Starting Auth MCP Server...${NC}"
+echo -e "Configuration: ${YELLOW}server.config${NC}"
 echo ""
 
-# Default to --no-auth if no arguments provided (for easier development)
-if [ $# -eq 0 ]; then
-    echo -e "${YELLOW}Tip: Running with --no-auth for development. Use './run_example.sh' with OAuth config for production.${NC}"
-    echo ""
-    exec python3 -m py_auth_mcp_server --no-auth
-else
-    exec python3 -m py_auth_mcp_server "$@"
-fi
+# Run server with arguments (uses server.config by default)
+exec python3 -m py_auth_mcp_server "$@"

examples/auth/server.config

@@ -1,18 +1,33 @@
-# Auth MCP Server Configuration - Development
-# Authentication disabled for local development
+# Auth MCP Server Configuration
+# This file follows the same format as the C++ auth example
 
 # Server settings
 host=0.0.0.0
 port=3001
-server_url=http://localhost:3001
+# server_url=https://marni-nightcapped-nonmeditatively.ngrok-free.dev
+
+# OAuth/IDP settings
+# Uncomment and configure for Keycloak or other OAuth provider
+client_id=oauth_0a650b79c5a64c3b920ae8c2b20599d9
+client_secret=6BiU2beUi2wIBxY3MUBLyYqoWKa4t0U_kJVm9mvSOKw
+auth_server_url=https://auth-test.gopher.security/realms/gopher-mcp-auth
+oauth_authorize_url=https://api-test.gopher.security/oauth/authorize
+
+# Direct OAuth endpoint URLs (optional, derived from auth_server_url if not set)
+# jwks_uri=https://keycloak.example.com/realms/mcp/protocol/openid-connect/certs
+# issuer=https://keycloak.example.com/realms/mcp
+# oauth_authorize_url=https://keycloak.example.com/realms/mcp/protocol/openid-connect/auth
+# oauth_token_url=https://keycloak.example.com/realms/mcp/protocol/openid-connect/token
 
 # Scopes
-allowed_scopes=openid profile email mcp:read mcp:admin
+exchange_idps=oauth-idp-714982830194556929-google
+allowed_scopes=openid profile email scope-001
 
 # Cache settings
 jwks_cache_duration=3600
 jwks_auto_refresh=true
 request_timeout=30
 
-# Auth bypass mode (enabled for development)
-auth_disabled=true
+# Auth bypass mode (for development/testing)
+# Set to true to disable authentication
+auth_disabled=false