Repository navigation

[Feat] Support custom MCP OAuth callback paths and WWW-Authenticate discovery - #2219

Merged

edelauna merged 11 commits into

Zoo-Code-Org:mainfrom

sdbrother0:feat/mcp-oauth-custom-callback-path

Oct 29, 2026

Merged

[Feat] Support custom MCP OAuth callback paths and WWW-Authenticate discovery#2219
edelauna merged 11 commits into
Zoo-Code-Org:mainfrom
sdbrother0:feat/mcp-oauth-custom-callback-path

Commits on Oct 28, 2026
Commits on Oct 29, 2026
- [Fix] Keep MCP OAuth when the published resource does not match the server URL
  
  sdbrother0
  and
  claude
  committed
  c665b26
- [Fix] Find the Bearer resource_metadata after other WWW-Authenticate challenges
  
  sdbrother0
  and
  claude
  committed
  bd92158
- [Fix] Read resource_metadata only from the Bearer challenge's own parameters
  
  sdbrother0
  and
  claude
  committed
  7abfa22
- [Fix] Parse WWW-Authenticate without a backtracking regular expression
  
  sdbrother0
  and
  claude
  committed
  dd3bd5a
- [Fix] Handle escaped quotes and invalid URLs in WWW-Authenticate parsing
  
  sdbrother0
  and
  claude
  committed
  52e625b
- [Fix] Restrict header-supplied MCP OAuth metadata to the server origin
  
  sdbrother0
  and
  claude
  committed
  a88e728
- [Fix] Do not follow redirects in the MCP OAuth WWW-Authenticate fallback
  
  sdbrother0
  and
  claude
  committed
  6756e2f
- Merge upstream main into feat/mcp-oauth-custom-callback-path
  sdbrother0
  committed
  007d336