stacklok / toolhive / 19102368340

push

github

Move remote MCP authentication handler to pkg/auth/remote (#2464)

Previously, RemoteAuthHandler and RemoteAuthConfig lived in pkg/runner/,
mixing authentication implementation with runner execution logic. This
change improves separation of concerns by moving auth logic to the auth
package while keeping configuration properly organized.

Changes:
- Created pkg/auth/remote/ package for remote MCP authentication
- Moved RemoteAuthHandler → authremote.Handler
- Moved RemoteAuthConfig → authremote.Config
- Updated all references in pkg/runner/, pkg/api/, and cmd/thv/app/
- Removed old remote_auth.go and remote_auth_test.go from pkg/runner/

Benefits:
- Clear package boundaries (runner executes, auth authenticates)
- Authentication logic can be tested independently of runner
- Follows existing pattern where RunConfig uses types from domain packages
  (similar to how it uses registry.Header, transport/types.MiddlewareConfig)
- Easier to reuse remote auth in other contexts

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude <noreply@anthropic.com>

1 of 61 new or added lines in 6 files covered. (1.64%)

21931 of 45395 relevant lines covered (48.31%)

37.31 hits per line