MCP: OAuth 2.1 support #2007
Draft
MCP: OAuth 2.1 support #2007
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Implements OAuth 2.1 authentication for MCP servers, including discovery, PKCE flow, token management, and UI integration. Adds new services, stores, and types for OAuth, updates AddServerForm and ServerCard components for authentication flow, and injects tokens into server requests. Conversation page now uses authenticated servers. MCP server deletion cleans up OAuth data.
Centralizes OAuth header injection logic in mcpServers store, improves token expiry checks, and streamlines OAuth flow handling in AddServerForm and ServerCard components. Also optimizes usage of getServersWithAuth in conversation page and cleans up redundant code and comments for maintainability.
Introduces a server-side endpoint for OAuth metadata discovery to avoid CORS issues and support RFC 9728 probing. Updates the client service to use this proxy, adds ProtectedResourceMetadata type, and improves ServerCard UI to better indicate authentication requirements.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.