add McpProtection plugin

[christiangoerdes]

Summary by CodeRabbit

• New Features
  • Added JSON-RPC protection with allow/deny rules, batch size enforcement, and configurable request/response/error JSON Schema validation.
  • Introduced new JSON-RPC method and schema configuration components.
  • Added MCP protection for JSON-RPC, including tools/list filtering of unauthorized entries.
• Bug Fixes
  • Improved JSON schema generation and YAML/JSONPath error locations for excluded/invisible elements and complex keys.
  • Enhanced “other attributes” map handling, including correct additionalProperties schema behavior and safer type coercion.
• Documentation
  • Updated JSON-RPC security tutorials and added supporting launcher scripts.
• Tests
  • Expanded JSON-RPC, MCP, and JSONPath/error rendering test coverage.

[coderabbitai]

Actionable comments posted: 1

🧹 Nitpick comments (1)

core/src/test/java/com/predic8/membrane/core/interceptor/mcp/MCPProtectionInterceptorTest.java (1)

398-423: 📐 Maintainability & Code Quality | 🔵 Trivial | ⚡ Quick win

Assert the response body stays unchanged here.

This only checks the return value. A regression that rewrites non-tools/list JSON but still returns CONTINUE would still pass, so the negative path is not really covered.

Suggested fix

         exc.setResponse(Response.ok()
                 .contentType(APPLICATION_JSON)
                 .body(body)
                 .build());

         assertEquals(CONTINUE, interceptor.handleResponse(exc));
+        assertEquals(body, exc.getResponse().getBodyAsStringDecoded());
     }

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@core/src/test/java/com/predic8/membrane/core/interceptor/mcp/MCPProtectionInterceptorTest.java`
around lines 398 - 423, The negative-path test in MCPProtectionInterceptorTest
only verifies that handleResponse returns CONTINUE, but it does not confirm that
a non-tools/list JSON response remains untouched. Update
leavesNonToolsListResponsesUnchanged to capture the original response body from
Response.ok() and assert after interceptor.handleResponse(exc) that the response
body is still identical, using the existing handleResponse/exc setup to ensure
no rewriting happens for ping responses.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In
`@core/src/main/java/com/predic8/membrane/core/interceptor/json/rpc/JsonRPCProtectionInterceptor.java`:
- Around line 185-190: Invalidate the cached JsonRPCValidator whenever
configuration objects are replaced so validation state stays in sync with the
active config. Update JsonRPCProtectionInterceptor’s setSchemaValidation,
setBatch, and setMethods setters to clear the memoized validator (the field used
by init()/getValidator()) after swapping in new JsonRPCSchemaValidation, batch,
or methods objects, so handleResponse() and request/response validation all use
the same current settings.

---

Nitpick comments:
In
`@core/src/test/java/com/predic8/membrane/core/interceptor/mcp/MCPProtectionInterceptorTest.java`:
- Around line 398-423: The negative-path test in MCPProtectionInterceptorTest
only verifies that handleResponse returns CONTINUE, but it does not confirm that
a non-tools/list JSON response remains untouched. Update
leavesNonToolsListResponsesUnchanged to capture the original response body from
Response.ok() and assert after interceptor.handleResponse(exc) that the response
body is still identical, using the existing handleResponse/exc setup to ensure
no rewriting happens for ping responses.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 7a6f94c6-71fd-4bb7-b120-b1233f1fa3f0

📥 Commits

Reviewing files that changed from the base of the PR and between bc77e5f and 271fa07.

📒 Files selected for processing (11)

• annot/src/main/java/com/predic8/membrane/annot/yaml/error/LineYamlErrorRenderer.java
• annot/src/test/java/com/predic8/membrane/annot/yaml/error/LineYamlErrorRendererTest.java
• core/src/main/java/com/predic8/membrane/core/interceptor/json/rpc/JsonRPCProtectionInterceptor.java
• core/src/main/java/com/predic8/membrane/core/interceptor/json/rpc/JsonRPCSchemaValidation.java
• core/src/main/java/com/predic8/membrane/core/interceptor/json/rpc/JsonRPCValidator.java
• core/src/main/java/com/predic8/membrane/core/interceptor/mcp/MCPProtectionInterceptor.java
• core/src/main/java/com/predic8/membrane/core/interceptor/mcp/MCPProtectionValidator.java
• core/src/test/java/com/predic8/membrane/core/interceptor/json/rpc/JsonRPCProtectionInterceptorTest.java
• core/src/test/java/com/predic8/membrane/core/interceptor/mcp/MCPProtectionInterceptorTest.java
• distribution/src/test/java/com/predic8/membrane/tutorials/security/JsonRpcProtectionTutorialTest.java
• distribution/tutorials/README.md

💤 Files with no reviewable changes (1)

• core/src/main/java/com/predic8/membrane/core/interceptor/json/rpc/JsonRPCSchemaValidation.java

✅ Files skipped from review due to trivial changes (1)

• distribution/tutorials/README.md

🚧 Files skipped from review as they are similar to previous changes (4)

• distribution/src/test/java/com/predic8/membrane/tutorials/security/JsonRpcProtectionTutorialTest.java
• annot/src/main/java/com/predic8/membrane/annot/yaml/error/LineYamlErrorRenderer.java
• core/src/test/java/com/predic8/membrane/core/interceptor/json/rpc/JsonRPCProtectionInterceptorTest.java
• core/src/main/java/com/predic8/membrane/core/interceptor/json/rpc/JsonRPCValidator.java