Agent 365 MCP : prouver le blocage avec APIM

1$files = './read-request.json', './write-request.json'
2 
3foreach ($file in $files) {
4    if (-not (Test-Path -LiteralPath $file)) {
5        throw "Fichier introuvable : $file"
6    }
7 
8    Get-Content -LiteralPath $file -Raw |
9        ConvertFrom-Json -ErrorAction Stop |
10        Out-Null
11}
12 
13Write-Host 'Les deux charges JSON-RPC sont valides.'

1[CmdletBinding()]
2param(
3    [Parameter(Mandatory)]
4    [uri]$GatewayUri,
5 
6    [Parameter(Mandatory)]
7    [uri]$DirectUri,
8 
9    [Parameter(Mandatory)]
10    [ValidateSet('Tool', 'Server')]
11    [string]$BlockType,
12 
13    [Parameter(Mandatory)]
14    [string]$ReadRequestPath,
15 
16    [Parameter(Mandatory)]
17    [string]$WriteRequestPath,
18 
19    [Parameter(Mandatory)]
20    [string]$VerificationPattern,
21 
22    [Parameter(Mandatory)]
23    [Security.SecureString]$AccessToken,
24 
25    [string]$EvidenceDirectory = './evidence',
26 
27    [ValidateRange(5, 300)]
28    [int]$TimeoutSeconds = 30
29)
30 
31Set-StrictMode -Version Latest
32$ErrorActionPreference = 'Stop'
33 
34function Get-Sha256 {
35    param([Parameter(Mandatory)][string]$Value)
36 
37    $algorithm = [Security.Cryptography.SHA256]::Create()
38    try {
39        $bytes = [Text.Encoding]::UTF8.GetBytes($Value)
40        $hash = $algorithm.ComputeHash($bytes)
41        return ([BitConverter]::ToString($hash)).Replace('-', '').ToLowerInvariant()
42    }
43    finally {
44        $algorithm.Dispose()
45    }
46}
47 
48function Invoke-McpRequest {
49    param(
50        [Parameter(Mandatory)][string]$Name,
51        [Parameter(Mandatory)][uri]$Uri,
52        [Parameter(Mandatory)][string]$Body,
53        [Parameter(Mandatory)][hashtable]$Headers
54    )
55 
56    $correlationId = [guid]::NewGuid().ToString()
57    $message = [Net.Http.HttpRequestMessage]::new([Net.Http.HttpMethod]::Post, $Uri)
58    $responseBody = ''
59    $statusCode = $null
60    $networkError = $null
61 
62    try {
63        foreach ($header in $Headers.GetEnumerator()) {
64            [void]$message.Headers.TryAddWithoutValidation($header.Key, $header.Value)
65        }
66 
67        [void]$message.Headers.TryAddWithoutValidation('X-Correlation-ID', $correlationId)
68        $message.Content = [Net.Http.StringContent]::new(
69            $Body,
70            [Text.Encoding]::UTF8,
71            'application/json'
72        )
73 
74        $response = $script:HttpClient.SendAsync($message).GetAwaiter().GetResult()
75        try {
76            $statusCode = [int]$response.StatusCode
77            $responseBody = $response.Content.ReadAsStringAsync().GetAwaiter().GetResult()
78        }
79        finally {
80            $response.Dispose()
81        }
82    }
83    catch {
84        $networkError = $_.Exception.Message
85    }
86    finally {
87        $message.Dispose()
88    }
89 
90    $isErrorPattern = [char]34 + 'isError' + [char]34 + '[ ]*:[ ]*true'
91 
92    [pscustomobject]@{
93        Name             = $Name
94        Uri              = $Uri.ToString()
95        CorrelationId    = $correlationId
96        StatusCode       = $statusCode
97        IsError          = $responseBody -match $isErrorPattern
98        NetworkError     = $networkError
99        RequestSha256    = Get-Sha256 -Value $Body
100        ResponseSha256   = if ($responseBody) { Get-Sha256 -Value $responseBody } else { $null }
101        ResponseBody     = $responseBody
102    }
103}
104 
105$readBody = Get-Content -LiteralPath $ReadRequestPath -Raw
106$writeBody = Get-Content -LiteralPath $WriteRequestPath -Raw
107 
108$script:HttpClient = [Net.Http.HttpClient]::new()
109$script:HttpClient.Timeout = [TimeSpan]::FromSeconds($TimeoutSeconds)
110 
111$tokenPointer = [IntPtr]::Zero
112$plainToken = $null
113 
114try {
115    $tokenPointer = [Runtime.InteropServices.Marshal]::SecureStringToBSTR($AccessToken)
116    $plainToken = [Runtime.InteropServices.Marshal]::PtrToStringBSTR($tokenPointer)
117    $headers = @{ Authorization = 'Bearer ' + $plainToken }
118 
119    $blocked = Invoke-McpRequest -Name 'BlockedWriteViaGateway' -Uri $GatewayUri -Body $writeBody -Headers $headers
120    $allowed = Invoke-McpRequest -Name 'AllowedReadViaGateway' -Uri $GatewayUri -Body $readBody -Headers $headers
121    $verifyGateway = Invoke-McpRequest -Name 'VerifyAfterGatewayBlock' -Uri $GatewayUri -Body $readBody -Headers $headers
122    $direct = Invoke-McpRequest -Name 'DirectWriteAttempt' -Uri $DirectUri -Body $writeBody -Headers $headers
123    $verifyDirect = Invoke-McpRequest -Name 'VerifyAfterDirectAttempt' -Uri $GatewayUri -Body $readBody -Headers $headers
124 
125    $gatewayBlockPassed = if ($BlockType -eq 'Tool') {
126        $blocked.StatusCode -eq 200 -and $blocked.IsError
127    }
128    else {
129        $blocked.StatusCode -eq 403
130    }
131 
132    $checks = [ordered]@{
133        GatewayBlockRecognized       = $gatewayBlockPassed
134        SiblingReadStillAllowed      = ($allowed.StatusCode -ge 200 -and $allowed.StatusCode -lt 300 -and -not $allowed.IsError)
135        StateUnchangedAfterGateway   = ($verifyGateway.ResponseBody -match $VerificationPattern)
136        DirectRouteDenied            = ($null -ne $direct.NetworkError -or $direct.StatusCode -lt 200 -or $direct.StatusCode -ge 300 -or $direct.IsError)
137        StateUnchangedAfterDirect    = ($verifyDirect.ResponseBody -match $VerificationPattern)
138    }
139 
140    $publicResults = @(
141        $blocked, $allowed, $verifyGateway, $direct, $verifyDirect
142    ) | Select-Object Name, Uri, CorrelationId, StatusCode, IsError,
143        NetworkError, RequestSha256, ResponseSha256
144 
145    New-Item -ItemType Directory -Path $EvidenceDirectory -Force | Out-Null
146    $timestamp = (Get-Date).ToUniversalTime().ToString('yyyyMMddTHHmmssZ')
147    $evidencePath = Join-Path $EvidenceDirectory "agent365-mcp-$timestamp.json"
148 
149    [ordered]@{
150        GeneratedUtc = (Get-Date).ToUniversalTime().ToString('o')
151        BlockType     = $BlockType
152        Checks        = $checks
153        Requests      = $publicResults
154    } | ConvertTo-Json -Depth 6 | Set-Content -LiteralPath $evidencePath -Encoding utf8
155 
156    $checks.GetEnumerator() | Format-Table -AutoSize | Out-Host
157    Write-Output $evidencePath
158 
159    if ($checks.Values -contains $false) {
160        exit 2
161    }
162 
163    exit 0
164}
165finally {
166    $script:HttpClient.Dispose()
167    $plainToken = $null
168 
169    if ($tokenPointer -ne [IntPtr]::Zero) {
170        [Runtime.InteropServices.Marshal]::ZeroFreeBSTR($tokenPointer)
171    }
172}

1$gatewayUri = [uri](Read-Host 'Point de terminaison MCP APIM')
2$directUri = [uri](Read-Host 'Point de terminaison MCP direct')
3$expectedState = Read-Host 'Expression régulière prouvant que le ticket reste ouvert'
4$token = Read-Host 'Jeton OAuth de l’identité de test' -AsSecureString
5 
6$evidencePath = & ./Test-Agent365McpGovernance.ps1 `
7    -GatewayUri $gatewayUri `
8    -DirectUri $directUri `
9    -BlockType Tool `
10    -ReadRequestPath './read-request.json' `
11    -WriteRequestPath './write-request.json' `
12    -VerificationPattern $expectedState `
13    -AccessToken $token
14 
15if ($LASTEXITCODE -ne 0) {
16    throw 'Au moins un contrôle d’acceptation a échoué.'
17}