feat(MK8S-196): always inject userData+getToken into context, drop authRequired

Author: JBWatenbergScality

shell-ui/src/auth/AuthProvider.tsx

@@ -53,7 +53,7 @@ function defaultDexConnectorMetadataService(connectorId: string) {
   return DexDefaultConnectorMetadataService;
 }
 
-export function getAbsoluteRedirectUrl(redirectUrl?: string) {
+function getAbsoluteRedirectUrl(redirectUrl?: string) {
   if (!redirectUrl) {
     return window.location.href;
   }

shell-ui/src/mcp/MCPRegistrar.tsx

@@ -22,7 +22,7 @@ export const _InternalMCPRegistrar = ({
   mcpToolsModuleInfo: FederatedModuleInfo;
   selfConfiguration: Record<string, unknown>;
 }) => {
-  const { getToken } = useAuth();
+  const { getToken, userData } = useAuth();
 
   useEffect(() => {
     if (!navigator.modelContext) return;
@@ -36,22 +36,9 @@ export const _InternalMCPRegistrar = ({
         description: tool.description,
         inputSchema: tool.inputSchema,
         execute: async (params: unknown, client: ModelContextClient) => {
-          if (tool.authRequired) {
-            const token = await getToken();
-            if (!token) {
-              return {
-                success: false,
-                error: {
-                  code: 'AUTH_REQUIRED',
-                  message:
-                    'You must log in to the browser window prior to performing this action.',
-                },
-              };
-            }
-          }
-
           const context: ToolContext = {
             getToken,
+            userData,
             selfConfiguration,
           };
 
@@ -70,7 +57,7 @@ export const _InternalMCPRegistrar = ({
         navigator.modelContext?.unregisterTool?.(name),
       );
     };
-  }, [moduleExports, mcpToolsModuleInfo, getToken, selfConfiguration]);
+  }, [moduleExports, mcpToolsModuleInfo, getToken, userData, selfConfiguration]);
 
   return null;
 };

shell-ui/src/mcp/types.ts

@@ -5,13 +5,23 @@
  * app-specific context derived from selfConfiguration.
  */
 
+export type UserData = {
+  token: string;
+  username: string;
+  groups: string[];
+  email: string;
+  id: string;
+};
+
 export type ToolContext = {
   /**
    * Always returns the latest token — safe to call multiple times during
    * long-running tool executions where the token may be silently renewed
    * by oidc-client-ts in the background.
    */
-  getToken: () => Promise<string>;
+  getToken: () => Promise<string | null>;
+  /** Authenticated user information. Undefined if the user is not logged in. */
+  userData: UserData | undefined;
   /**
    * Raw selfConfiguration from the app's runtime WebFinger.
    * Micro-frontends cast this to their own known config shape to extract endpoints etc.
@@ -43,8 +53,6 @@ export type MCPToolDefinition<
   description: string;
   /** JSON Schema Draft 7 object describing the tool's input parameters (excluding context) */
   inputSchema: Record<string, unknown>;
-  /** When true, shell-ui will resolve a token and inject ToolContext before calling execute() */
-  authRequired: boolean;
   execute: (
     params: TParams & { context: ToolContext },
     client: ModelContextClient,