Add issuer as an initialization parameter

Author: pavinduLakshan

examples/express-mcp-server/src/index.ts

@@ -11,6 +11,7 @@ const port = process.env.PORT || 3000;
 
 const mcpAuthServer = new McpAuthServer({
   baseUrl: process.env.BASE_URL as string,
+  issuer: process.env.ISSUER as string,
 });
 
 app.use(express.json());

examples/express-mcp-vet-ai-assist-app/src/index.ts

@@ -31,6 +31,7 @@ const app: Express = express();
 
 const mcpAuthServer: McpAuthServer = new McpAuthServer({
   baseUrl: process.env.BASE_URL as string,
+  issuer: process.env.ISSUER as string,
 });
 
 app.use(express.json());

packages/mcp-express/src/middlewares/bearerAuthMiddleware.ts

@@ -60,7 +60,7 @@ export default function bearerAuthMiddleware(options: McpAuthOptions) {
       options: {
         audience: options?.audience,
         clockTolerance: 60,
-        issuer: `${issuerBase}/oauth2/token`,
+        issuer: `${options.issuer}`,
       },
     };
 

packages/mcp-express/src/routes/auth.ts

@@ -23,15 +23,15 @@ import {getProtectedResourceMetadata} from '../controllers/protected-resource';
 
 export default function AuthRouter(options: McpAuthOptions): express.Router {
   const router: express.Router = express.Router();
-  const {baseUrl} = options;
+  const {baseUrl, issuer} = options;
   if (!baseUrl) {
     throw new Error('baseUrl must be provided');
   }
 
   router.use(
     PROTECTED_RESOURCE_URL,
     getProtectedResourceMetadata({
-      authorizationServers: [baseUrl],
+      authorizationServers: [issuer],
       resource: 'https://api.example.com',
     }),
   );

packages/mcp-node/src/models/mcp-auth.ts

@@ -19,4 +19,5 @@
 export interface McpAuthOptions {
   audience?: string;
   baseUrl: string;
+  issuer: string;
 }