[RHIDP-12903] Remove Bearer From MCP HEADERS for Lightspeed (#2621)

* remove Bearer from MCP header

Signed-off-by: Jordan Dubrick <jdubrick@redhat.com>

* add changeset

Signed-off-by: Jordan Dubrick <jdubrick@redhat.com>

* remove existing Bearer prefixes after rebase

Signed-off-by: Jordan Dubrick <jdubrick@redhat.com>

---------

Signed-off-by: Jordan Dubrick <jdubrick@redhat.com>

Author: Jdubrick

workspaces/lightspeed/.changeset/rotten-papayas-add.md

@@ -0,0 +1,5 @@
+---
+'@red-hat-developer-hub/backstage-plugin-lightspeed-backend': patch
+---
+
+remove bearer from mcp header to adhere to LCORE standard

workspaces/lightspeed/plugins/lightspeed-backend/__fixtures__/mcpHandlers.ts

@@ -28,7 +28,7 @@ const MOCK_TOOLS = [
 export const mcpHandlers: HttpHandler[] = [
   http.post(MOCK_MCP_ADDR, async ({ request }) => {
     const auth = request.headers.get('Authorization');
-    if (auth !== `Bearer ${MOCK_MCP_VALID_TOKEN}`) {
+    if (auth !== `${MOCK_MCP_VALID_TOKEN}`) {
       return HttpResponse.json({ error: 'Unauthorized' }, { status: 401 });
     }
 

workspaces/lightspeed/plugins/lightspeed-backend/src/service/mcp-server-validator.ts

@@ -34,7 +34,7 @@ export class McpServerValidator {
   async validate(url: string, token: string): Promise<McpValidationResult> {
     const headers: Record<string, string> = {
       'Content-Type': 'application/json',
-      Authorization: `Bearer ${token}`,
+      Authorization: `${token}`,
       Accept: 'application/json, text/event-stream',
     };
 

workspaces/lightspeed/plugins/lightspeed-backend/src/service/router.test.ts

@@ -514,8 +514,8 @@ describe('lightspeed router tests', () => {
 
       const parsedHeaders = JSON.parse(capturedMcpHeaders!);
       expect(parsedHeaders).toEqual({
-        'mcp-server-1': { Authorization: 'Bearer token-1' },
-        'mcp-server-2': { Authorization: 'Bearer token-2' },
+        'mcp-server-1': { Authorization: 'token-1' },
+        'mcp-server-2': { Authorization: 'token-2' },
       });
     });
 
@@ -617,7 +617,7 @@ describe('lightspeed router tests', () => {
 
       const parsedHeaders = JSON.parse(capturedMcpHeaders!);
       expect(parsedHeaders).toEqual({
-        'single-mcp-server': { Authorization: 'Bearer single-token' },
+        'single-mcp-server': { Authorization: 'single-token' },
       });
     });
 

workspaces/lightspeed/plugins/lightspeed-backend/src/service/router.ts

@@ -57,7 +57,7 @@ interface StaticMcpServer {
 
 /**
  * Build MCP-HEADERS for LCS.  Format matches the LCS "client" auth model:
- *   { "server-name": { "Authorization": "Bearer <token>" } }
+ *   { "server-name": { "Authorization": "<token>" } }
  *
  * For each admin-configured server, includes the user's override token if
  * present in the DB, falling back to the admin default from app-config.
@@ -82,7 +82,7 @@ async function buildMcpHeaders(
     // If neither exists, the server is excluded from MCP-HEADERS.
     const token = setting?.token || server.token;
     if (token) {
-      headers[server.name] = { Authorization: `Bearer ${token}` };
+      headers[server.name] = { Authorization: `${token}` };
     }
   }