docs: update JS SDK docs for 1.0

[xiaoyijun]

Summary

Updates the JS SDK portions of the docs site for the mcp-auth 1.0 release (mcp-auth/js#50, published as 1.0.0-beta.1 on the latest dist-tag). mcp-auth 1.0 targets the MCP TypeScript SDK v2 (@modelcontextprotocol/server): the SDK now ships the HTTP layer of MCP authorization itself, and mcp-auth supplies the two inputs it asks you to bring — a token verifier and your auth metadata.

Docs

• Get started (docs/README.mdx): rewritten for the 1.0 API — install with the @modelcontextprotocol/server peer dependency, protectedResourceMetadata declaration, SDK metadata helpers + requireBearerAuth wiring (fetch-native and Express tabs), and getAuthInfo in tools. Points MCP SDK v1 users to mcp-auth@0.2.

• Configure MCP Auth (configure-server/mcp-auth.mdx): rewritten around the new config shape — on-demand discovery vs. fetchServerConfig, wire-format (snake_case) metadata, full protectedResourceMetadata options, and serving the discovery documents via the SDK helpers. The #other-ways anchor is preserved.

• Configure Bearer auth (configure-server/bearer-auth.mdx): rewritten around the SDK's requireBearerAuth + getBearerAuthOptions, always-on audience validation (RFC 8707), per-tool scopes via getAuthInfo, jwtVerifyOptions, and an opaque-token (introspection) custom-verifier example.

• New migration guide (docs/migrate-to-v1.mdx, added to the sidebar): the v0.2 → 1.0 table and breaking-changes walkthrough from feat!: rewrite mcp-auth for MCP SDK v2 (1.0) js#50.

• Tutorials (whoami, todo-manager): server code rebuilt on MCP SDK v2 (@modelcontextprotocol/express / node adapters), matching the new sample servers. The whoami tutorial now returns the verified JWT claims (no userinfo round-trip) and adds the Logto API resource step required for audience-bound tokens; provider/RBAC/VS Code sections are otherwise unchanged.

• Landing page: _get-started-code.mdx snippet updated to the 1.0 API; spec links now use the latest spec URL. The "How about the MCP SDKs?" section is rewritten to the 1.0 positioning — the SDK ships the HTTP auth layer, mcp-auth brings the verifier + metadata, and the section lists the five verifier pitfalls mcp-auth handles by default (replacing the outdated "bridges the gap" narrative). The subheader now announces 1.0. New translation IDs fall back to English until translations regenerate.

• Practice-informed pass (after migrating a production MCP server — Logto Cloud's — to mcp-auth 1.0): tutorials reordered so whoami comes first (sidebar + navbar), wiring code deduplicated across Get started / Configure Server (the configure pages now frame the "two halves" and link to Get started for full wiring), the todo-manager tutorial's duplicated Logto steps and considerations collapsed, the Get started provider section condensed to the two requirements that matter in practice, a Hono pointer added, McpAuthInfo.token documented for downstream API calls, and the migration guide moved after Provider Guides.

Generated content

• docs/references/js regenerated with typedoc from mcp-auth 1.0.0-beta.1 (new pages: getAuthInfo, McpAuthInfo, ProtectedResourceMetadataConfig, …; removed 0.2-only pages).
• Stale i18n copies of the generated JS reference are deleted so locales fall back to English until the translation workflow regenerates them — the old copies linked to removed pages and broke the localized builds. Prose translations are untouched and will be updated by the usual content-generation workflow.

Verification

• pnpm build passes for all locales (broken-links check is throw).
• pnpm lint / pnpm typecheck pass for the touched files (the 3 pre-existing MDX parsing errors in provider-guides/* are unchanged on master).

🤖 Generated with Claude Code

[cloudflare-workers-and-pages]

Deploying mcp-auth-docs with    Cloudflare Pages

Latest commit:	a3cd8a9
Status:	✅  Deploy successful!
Preview URL:	https://6e5a6f66.mcp-auth-docs.pages.dev
Branch Preview URL:	https://xiaoyijun-docs-js-sdk-v1.mcp-auth-docs.pages.dev

View logs