zhengchen.tao
71600adba9
Build Docker Image / build (push) Failing after 1m40s
MCP (Model Context Protocol) server providing read-only access to a Gitea instance, gated by OAuth-issued JWT bearer tokens. See README.md for setup.
90 lines
4.2 KiB
C#
90 lines
4.2 KiB
C#
using GiteaMcp.Auth;
|
||
using GiteaMcp.Config;
|
||
using GiteaMcp.Endpoints;
|
||
using GiteaMcp.Services;
|
||
using Microsoft.Extensions.Http.Resilience;
|
||
using System.Net;
|
||
using System.Net.Http.Headers;
|
||
|
||
var builder = WebApplication.CreateBuilder(args);
|
||
|
||
// ─── 配置绑定 ───────────────────────────────────────────────
|
||
builder.Services.Configure<GiteaOptions>(
|
||
builder.Configuration.GetSection(GiteaOptions.SectionName));
|
||
builder.Services.Configure<JwtOptions>(
|
||
builder.Configuration.GetSection(JwtOptions.SectionName));
|
||
builder.Services.Configure<McpDiscoveryOptions>(
|
||
builder.Configuration.GetSection(McpDiscoveryOptions.SectionName));
|
||
|
||
// ─── JWT Bearer + Scope Policy ─────────────────────────────
|
||
builder.Services.AddGiteaJwtBearer(builder.Configuration);
|
||
builder.Services.AddScopePolicies();
|
||
|
||
// ─── HTTP Context Accessor（Tool 里可选用，暂保留接口） ────────
|
||
builder.Services.AddHttpContextAccessor();
|
||
|
||
// ─── Gitea HTTP Client ─────────────────────────────────────
|
||
var giteaBaseUrl = builder.Configuration["Gitea:BaseUrl"];
|
||
if (string.IsNullOrWhiteSpace(giteaBaseUrl))
|
||
throw new InvalidOperationException(
|
||
"Gitea:BaseUrl 未配置。请通过 env Gitea__BaseUrl 设置你的 Gitea 实例 URL。");
|
||
var giteaPat = builder.Configuration["Gitea:AdminPat"] ?? string.Empty;
|
||
|
||
builder.Services.AddHttpClient("gitea", client =>
|
||
{
|
||
// 确保 BaseAddress 末尾有斜杠（HttpClient 的规范）
|
||
var url = giteaBaseUrl.TrimEnd('/') + "/";
|
||
client.BaseAddress = new Uri(url);
|
||
|
||
// Gitea 推荐 "token <PAT>" 格式，比 Bearer 更稳
|
||
client.DefaultRequestHeaders.Authorization =
|
||
new AuthenticationHeaderValue("token", giteaPat);
|
||
|
||
client.DefaultRequestHeaders.Accept.Add(
|
||
new MediaTypeWithQualityHeaderValue("application/json"));
|
||
|
||
// 单请求超时 30s
|
||
client.Timeout = TimeSpan.FromSeconds(30);
|
||
})
|
||
.AddStandardResilienceHandler(options =>
|
||
{
|
||
// 3 次重试，指数退避（Microsoft.Extensions.Http.Resilience 标准配置）
|
||
options.Retry.MaxRetryAttempts = 3;
|
||
options.Retry.BackoffType = Polly.DelayBackoffType.Exponential;
|
||
options.Retry.Delay = TimeSpan.FromSeconds(1);
|
||
options.Retry.UseJitter = true;
|
||
// 仅对 5xx / 429 / 网络错误重试；4xx 由 ShouldHandle 默认配置自动跳过
|
||
options.TotalRequestTimeout.Timeout = TimeSpan.FromSeconds(90);
|
||
options.AttemptTimeout.Timeout = TimeSpan.FromSeconds(30);
|
||
// Polly 校验：SamplingDuration ≥ 2× AttemptTimeout，默认 30s 不达标
|
||
options.CircuitBreaker.SamplingDuration = TimeSpan.FromSeconds(60);
|
||
});
|
||
|
||
// ─── 业务服务 ──────────────────────────────────────────────
|
||
builder.Services.AddSingleton<GiteaRepoFilter>();
|
||
builder.Services.AddScoped<GiteaApiClient>();
|
||
|
||
// ─── MCP Server ────────────────────────────────────────────
|
||
builder.Services.AddMcpServer()
|
||
.WithHttpTransport() // Streamable HTTP（Claude.ai custom connector 走这个）
|
||
.WithToolsFromAssembly(); // 自动扫描 [McpServerToolType]
|
||
|
||
// ─── Build ─────────────────────────────────────────────────
|
||
var app = builder.Build();
|
||
|
||
// ─── Middleware 顺序：认证 → 授权 → 路由 ────────────────────
|
||
app.UseAuthentication();
|
||
app.UseAuthorization();
|
||
|
||
// ─── Endpoints ─────────────────────────────────────────────
|
||
app.MapDiscovery();
|
||
|
||
// MCP 端点：要求通过 JWT 认证 + read:gitea scope
|
||
app.MapMcp("/mcp")
|
||
.RequireAuthorization(ScopePolicies.ReadGitea);
|
||
|
||
// 健康检查（Kubernetes / Docker healthcheck 用）
|
||
app.MapGet("/healthz", () => Results.Ok(new { status = "ok", timestamp = DateTimeOffset.UtcNow }));
|
||
|
||
app.Run();
|