用 AgentCore Gateway 为 MCP 服务加上 OAuth 授权码流认证

# 创建 User Pool
aws cognito-idp create-user-pool \
  --pool-name "mcp-auth-pool" \
  --policies "PasswordPolicy={MinimumLength=8,RequireUppercase=true}" \
  --region us-east-1

# 记下返回的 UserPoolId，例如 us-east-1_ABC123def

# 创建 App Client，启用授权码流
aws cognito-idp create-user-pool-client \
  --user-pool-id us-east-1_ABC123def \
  --client-name "mcp-gateway-client" \
  --generate-client-secret \
  --allowed-o-auth-flows code \
  --allowed-o-auth-scopes "openid profile mcp-tools/read" \
  --callback-urls "https://your-app.example.com/callback" \
  --supported-identity-providers COGNITO \
  --region us-east-1

# 记下返回的 ClientId，例如 xyz789abc

# agentcore-gateway-config.yaml
GatewayName: mcp-internal-tools
Description: "Internal tools MCP server with OAuth inbound auth"

InboundAuth:
  Type: OAuthCodeFlow
  OAuthConfig:
    IssuerUrl: "https://cognito-idp.us-east-1.amazonaws.com/us-east-1_ABC123def"
    Audience: "xyz789abc"           # Cognito App Client ID
    Scopes:
      - "mcp-tools/read"
    TokenValidation:
      CheckSignature: true
      CheckExpiry: true
      CheckAudience: true

MCPServers:
  - Name: internal-tools
    Runtime: Python
    EntryPoint: "server.main"
    PackageUri: "s3://my-bucket/mcp-server-package.zip"

aws bedrock-agentcore create-gateway \
  --gateway-name mcp-internal-tools \
  --cli-input-json file://agentcore-gateway-config.yaml \
  --region us-east-1

"""MCP client with OAuth Authorization Code Flow integration."""

import httpx
import json
import webbrowser
from httpx_oauth.clients.cognito import CognitoOAuth2

# —— 配置 ——
COGNITO_POOL_ID = "us-east-1_ABC123def"
CLIENT_ID = "xyz789abc"
CLIENT_SECRET = "your-client-secret"  # 从 AWS CLI 或 Secrets Manager 获取
REGION = "us-east-1"
GATEWAY_URL = "https://agentcore.us-east-1.amazonaws.com/gateway/mcp-internal-tools"

REDIRECT_URI = "https://your-app.example.com/callback"
SCOPE = ["openid", "profile", "mcp-tools/read"]

# —— OAuth 客户端 ——
oauth_client = CognitoOAuth2(
    client_id=CLIENT_ID,
    client_secret=CLIENT_SECRET,
    user_pool_id=COGNITO_POOL_ID,
    region=REGION,
)

async def authenticate_user():
    """引导用户完成 IdP 登录，获取 access token。"""
    authorization_url = await oauth_client.get_authorization_url(
        redirect_uri=REDIRECT_URI,
        scope=SCOPE,
    )
    # 在浏览器中打开 IdP 登录页
    webbrowser.open(authorization_url)
    print(f"请在浏览器中完成登录，回调后将 code 粘贴到这里：")
    code = input("Authorization code: ")

    # 用 code 换 token
    token = await oauth_client.get_access_token(
        code=code,
        redirect_uri=REDIRECT_URI,
    )
    return token

async def call_mcp_tool(tool_name: str, arguments: dict):
    """携带 Bearer token 调用 MCP 工具。"""
    token = await authenticate_user()

    headers = {
        "Authorization": f"Bearer {token}",
        "Content-Type": "application/json",
    }

    payload = {
        "jsonrpc": "2.0",
        "id": 1,
        "method": "tools/call",
        "params": {
            "name": tool_name,
            "arguments": arguments,
        },
    }

    async with httpx.AsyncClient() as client:
        response = await client.post(GATEWAY_URL, headers=headers, json=payload)
        if response.status_code == 401:
            print("Token 无效或已过期，请重新认证。")
            return None
        response.raise_for_status()
        return response.json()

# —— 使用示例 ——
if __name__ == "__main__":
    import asyncio
    result = asyncio.run(call_mcp_tool("query_internal_db", {"table": "orders", "limit": 5}))
    print(json.dumps(result, indent=2))

pip install httpx httpx-oauth

# 1. 确认 Gateway 的 JWKS 端点可达
curl -s "https://cognito-idp.us-east-1.amazonaws.com/us-east-1_ABC123def/.well-known/jwks.json" | head -c 200

# 2. 不带 token 直接请求 Gateway，应返回 401
curl -s -o /dev/null -w "%{http_code}" \
  -X POST "$GATEWAY_URL" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{}}'
# 预期输出: 401

# 3. 用合法 token 请求，应返回 200
# (token 从上面的 Python 客户端获取，或通过 Cognito hosted UI 手动获取)
curl -s -w "\n%{http_code}" \
  -X POST "$GATEWAY_URL" \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}'
# 预期输出: 200 + 工具列表 JSON