1
import { describe, it, expect, beforeEach, vi } from "vitest";
2
import { AuthService } from "./auth";
3

4
describe("AuthService", () => {
5
  beforeEach(() => vi.unstubAllEnvs());
6

7
  it("dev mode — generate key, 401 if missing header", () => {
8
    const auth = new AuthService();
9
    const mw = auth.middleware();
10
    const req = { headers: {} } as any;
11
    const res = { status: vi.fn().mockReturnThis(), json: vi.fn() } as any;
12
    const next = vi.fn();
13
    mw(req, res, next);
14
    expect(res.status).toHaveBeenCalledWith(401);
15
  });
16

17
  it("accept valid keys from AUTH_KEYS", () => {
18
    vi.stubEnv("AUTH_KEYS", "sk-a,sk-b");
19
    const auth = new AuthService();
20
    expect(auth.validate("sk-a")).toBe(true);
21
    expect(auth.validate("sk-c")).toBe(false);
22
  });
23

24
  it("reject wrong key via middleware", () => {
25
    vi.stubEnv("AUTH_KEYS", "sk-valid");
26
    const auth = new AuthService();
27
    const req = { headers: { "x-api-key": "sk-wrong" } } as any;
28
    const res = { status: vi.fn().mockReturnThis(), json: vi.fn() } as any;
29
    const next = vi.fn();
30
    auth.middleware()(req, res, next);
31
    expect(res.status).toHaveBeenCalledWith(403);
32
  });
33

34
  it("pass valid key, set req.apiKey", () => {
35
    vi.stubEnv("AUTH_KEYS", "sk-valid");
36
    const auth = new AuthService();
37
    const req = { headers: { "x-api-key": "sk-valid" } } as any;
38
    const res = { status: vi.fn().mockReturnThis(), json: vi.fn() } as any;
39
    const next = vi.fn();
40
    auth.middleware()(req, res, next);
41
    expect(next).toHaveBeenCalled();
42
    expect(req.apiKey).toBe("sk-valid");
43
  });
44
});

1
import { describe, it, expect, beforeEach } from "vitest";
2
import { RateLimiter } from "./rate-limit";
3

4
describe("RateLimiter", () => {
5
  let rl: RateLimiter;
6
  beforeEach(() => { rl = new RateLimiter(5, 1000); });
7

8
  it("allow up to limit", () => {
9
    for (let i = 0; i < 5; i++) expect(rl.check("k1")).toBe(true);
10
  });
11

12
  it("block after limit", () => {
13
    for (let i = 0; i < 5; i++) rl.check("k1");
14
    expect(rl.check("k1")).toBe(false);
15
  });
16

17
  it("separate buckets per key", () => {
18
    for (let i = 0; i < 5; i++) { rl.check("a"); rl.check("b"); }
19
    expect(rl.check("a")).toBe(false);
20
    expect(rl.check("b")).toBe(false);
21
    expect(rl.check("c")).toBe(true); // fresh key
22
  });
23
});

1
✓ AuthService > dev mode — generate key, 401 if missing header
2
✓ AuthService > accept valid keys from AUTH_KEYS
3
✓ AuthService > reject wrong key via middleware
4
✓ AuthService > pass valid key, set req.apiKey
5
✓ RateLimiter > allow up to limit
6
✓ RateLimiter > block after limit
7
✓ RateLimiter > separate buckets per key
8
✓ CORS > ...
9
✓ env > ...
10
✓ Integration > respond to initialize
11
✓ Integration > list tools (7)
12
✓ Integration > list prompts (3)

1
{
2
  "name": "github-issue-mcp",
3
  "version": "1.0.2",
4
  "description": "MCP server for GitHub issue management",
5
  "type": "module",
6
  "bin": { "github-issue-mcp": "./build/server.js" },
7
  "files": ["build/", "README.md"],
8
  "keywords": ["mcp", "github", "issues", "model-context-protocol", "ai"],
9
  "license": "MIT"
10
}

1
{
2
  "mcpServers": {
3
    "github-issue-manager": {
4
      "command": "npx",
5
      "args": ["-y", "github-issue-mcp"],
6
      "env": { "GITHUB_TOKEN": "ghp_...", "AUTH_KEYS": "sk-mcp-dev" }
7
    }
8
  }
9
}

1
📁 github-issue-mcp v1.0.2
2
├── 🛠 7 tools · 📄 3 resources · 💬 3 prompts
3
├── 🔒 API key auth + rate limiting + CORS
4
├── 🐳 Docker (multi-stage, non-root, read-only)
5
├── ✅ 10+ unit tests + integration tests
6
└── 📦 npm package + MCP directories