Add useJwtMiddleware if agent is hosted publicly

Author: Jesus Terrazas

nodejs/claude/sample-agent/src/index.ts

@@ -6,11 +6,13 @@ import { configDotenv } from 'dotenv';
 
 configDotenv();
 
-import { AuthConfiguration, authorizeJWT, CloudAdapter, Request } from '@microsoft/agents-hosting';
+import { AuthConfiguration, authorizeJWT, CloudAdapter, loadAuthConfigFromEnv, Request } from '@microsoft/agents-hosting';
 import express, { Response } from 'express'
 import { agentApplication } from './agent';
 
-const authConfig: AuthConfiguration = {};
+// Use request validation middleware only if hosting publicly
+const useJwtMiddleware = Boolean(process.env.WEBSITE_SITE_NAME) || process.env.NODE_ENV === 'production';
+const authConfig: AuthConfiguration = useJwtMiddleware ? loadAuthConfigFromEnv() : {};
 
 const server = express()
 server.use(express.json())
@@ -23,13 +25,14 @@ server.post('/api/messages', (req: Request, res: Response) => {
   })
 })
 
-const port = process.env.PORT || 3978
-server.listen(port, async () => {
-  console.log(`\nServer listening to port ${port} for appId ${authConfig.clientId} debug ${process.env.DEBUG}`)
+const port = Number(process.env.PORT) || 3978
+const host = useJwtMiddleware ? '0.0.0.0' : '127.0.0.1';
+server.listen(port, host, async () => {
+  console.log(`\nServer listening on ${host}:${port} for appId ${authConfig.clientId} debug ${process.env.DEBUG}`)
 }).on('error', async (err) => {
   console.error(err);
   process.exit(1);
 }).on('close', async () => {
   console.log('Server closed');
   process.exit(0);
-});
+});

nodejs/langchain/sample-agent/src/index.ts

@@ -3,11 +3,13 @@ import { configDotenv } from 'dotenv';
 
 configDotenv();
 
-import { AuthConfiguration, authorizeJWT, CloudAdapter, Request } from '@microsoft/agents-hosting';
+import { AuthConfiguration, authorizeJWT, CloudAdapter, loadAuthConfigFromEnv, Request } from '@microsoft/agents-hosting';
 import express, { Response } from 'express'
 import { agentApplication } from './agent';
 
-const authConfig: AuthConfiguration = {};
+// Use request validation middleware only if hosting publicly
+const useJwtMiddleware = Boolean(process.env.WEBSITE_SITE_NAME) || process.env.NODE_ENV === 'production';
+const authConfig: AuthConfiguration = useJwtMiddleware ? loadAuthConfigFromEnv() : {};
 
 const server = express()
 server.use(express.json())
@@ -20,9 +22,10 @@ server.post('/api/messages', (req: Request, res: Response) => {
   })
 })
 
-const port = process.env.PORT || 3978
-server.listen(port, async () => {
-  console.log(`\nServer listening to port ${port} for appId ${authConfig.clientId} debug ${process.env.DEBUG}`)
+const port = Number(process.env.PORT) || 3978
+const host = useJwtMiddleware ? '0.0.0.0' : '127.0.0.1';
+server.listen(port, host, async () => {
+  console.log(`\nServer listening on ${host}:${port} for appId ${authConfig.clientId} debug ${process.env.DEBUG}`)
 }).on('error', async (err) => {
   console.error(err);
   process.exit(1);

nodejs/openai/sample-agent/src/index.ts

@@ -6,11 +6,13 @@ import { configDotenv } from 'dotenv';
 
 configDotenv();
 
-import { AuthConfiguration, authorizeJWT, CloudAdapter, Request } from '@microsoft/agents-hosting';
+import { AuthConfiguration, authorizeJWT, CloudAdapter, loadAuthConfigFromEnv, Request } from '@microsoft/agents-hosting';
 import express, { Response } from 'express'
 import { agentApplication } from './agent';
 
-const authConfig: AuthConfiguration = {};
+// Use request validation middleware only if hosting publicly
+const useJwtMiddleware = Boolean(process.env.WEBSITE_SITE_NAME) || process.env.NODE_ENV === 'production';
+const authConfig: AuthConfiguration = useJwtMiddleware ? loadAuthConfigFromEnv() : {};
 
 const server = express()
 server.use(express.json())
@@ -23,9 +25,10 @@ server.post('/api/messages', (req: Request, res: Response) => {
   })
 })
 
-const port = process.env.PORT || 3978
-server.listen(port, async () => {
-  console.log(`\nServer listening to port ${port} for appId ${authConfig.clientId} debug ${process.env.DEBUG}`)
+const port = Number(process.env.PORT) || 3978
+const host = useJwtMiddleware ? '0.0.0.0' : '127.0.0.1';
+server.listen(port, host, async () => {
+  console.log(`\nServer listening on ${host}:${port} for appId ${authConfig.clientId} debug ${process.env.DEBUG}`)
 }).on('error', async (err) => {
   console.error(err);
   process.exit(1);