gateway.mjs
sha256:87f84653ce4706be8c65b0c4494ed6fb891213cca82db2b1824772cddc41a752
feat(auth): durable MCP OAuth refresh via shared strong sto…
Agent
minor
57 days ago
| 1 | /** |
| 2 | * Netlify serverless wrapper for the Knowtation Hub Gateway. |
| 3 | * Redirects all traffic to this function; the Express app handles /auth/* and /api/*. |
| 4 | * Persists hosted billing state in Netlify Blobs (store `gateway-billing`). |
| 5 | */ |
| 6 | import serverless from 'serverless-http'; |
| 7 | import { connectLambda, getStore } from '@netlify/blobs'; |
| 8 | import { app } from '../../hub/gateway/server.mjs'; |
| 9 | |
| 10 | export const handler = async (event, context) => { |
| 11 | connectLambda(event); |
| 12 | globalThis.__knowtation_gateway_blob = getStore({ name: 'gateway-billing', consistency: 'eventual' }); |
| 13 | globalThis.__knowtation_attest_blob = getStore({ name: 'gateway-attestation', consistency: 'eventual' }); |
| 14 | // Refresh-token store. Strong consistency is NOT available here: this gateway runs in Netlify's |
| 15 | // Lambda compatibility mode (serverless-http + connectLambda), which wires up only edge |
| 16 | // (eventual) access and omits the `uncachedEdgeURL` that strong-consistency reads require — a |
| 17 | // strong read throws BlobsConsistencyError, which previously blocked every refresh-cookie write. |
| 18 | // We therefore use eventual consistency (same as the billing store). Reuse detection still holds |
| 19 | // after edge propagation (<60s, usually sub-second); see the trade-off note and hardening options |
| 20 | // in hub/gateway/refresh-token-store.mjs. |
| 21 | globalThis.__knowtation_gateway_auth_blob = getStore({ name: 'gateway-auth', consistency: 'eventual' }); |
| 22 | try { |
| 23 | return await serverless(app)(event, context); |
| 24 | } finally { |
| 25 | delete globalThis.__knowtation_gateway_blob; |
| 26 | delete globalThis.__knowtation_attest_blob; |
| 27 | delete globalThis.__knowtation_gateway_auth_blob; |
| 28 | } |
| 29 | }; |
File History
5 commits
sha256:87f84653ce4706be8c65b0c4494ed6fb891213cca82db2b1824772cddc41a752
feat(auth): durable MCP OAuth refresh via shared strong sto…
Agent
minor
57 days ago
sha256:873e30b7fafe601346295f8f4289f388f21d8f715f28584d5481899ba2b714fc
Merge pull request #249 from aaronrene/muse-mirror
Agent
74 days ago
sha256:d8c648b20a4d53b2673c5c082ee7edfa7b2fc9b11080832da1f38807b6bf940b
fix(7C-L1b): route hosted delegation proposals through cani…
Human
minor
⚠
77 days ago
sha256:2827ba9e7632a4b141c50caf1e8f7d77abbc3515be20e7465f2bccb0ac4edf91
fix: repair endpoint now sets has_active_subscription when …
Human
minor
⚠
97 days ago
sha256:6a102aafafdfe7e70a24f4e59740200f0ee713ce7915f1b53e9d4ba5ee8b4410
Initial Muse snapshot
Human
129 days ago