feat: support OAuth 2.1 for streamable-http MCP servers#1

Open

edelauna wants to merge 27 commits intomainfrom

feat/mcp-oauth-streamable-http

Commits on Apr 24, 2026

feat(SecretStorageService): service for mcp hub to store access and refresh tokens
edelauna
committed
feat(callbackServer): used for OAuth 2.1 callbacks
edelauna
committed
fix(@modelcontextprotocol): overwrites
edelauna
committed
feat(McpOAuthClientProvider): implementing provider to allow OAuth for MCP servers
edelauna
committed
fix(callbackServer): removing reflected xss and updating template
edelauna
committed
fix(McpHub): not blocking on authprovider flow
edelauna
committed
refactor(McpOAuthClientProvider): do not default to openid scope
edelauna
committed
feat(McpHub): handle OAuth refresh mid tool call
edelauna
committed
fix(McpOAuthClientProvider): refresh token race condition between client_id
edelauna
committed
feat(McpHub): update OAuth Flow to be opt in and handle concurrent flows across instances
edelauna
committed
refactor(McpHub): prompt for authentication even mid tool call
edelauna
committed
refactor(callbackServer): added in i18n translations
edelauna
committed
feat(McpHub): cache whether server required OAuth or not
edelauna
committed
refactor(McpOAuthClientProvider): add TOKEN_EXPIRY_BUFFER
edelauna
committed
refactor(SecretStorageService): caching full DCR repose
edelauna
committed
refactor(McpHub): making prompt long running or dismissable
edelauna
committed
feat(McpHub): handling concurrent window auth
edelauna
committed
feat(McpHub): making oauth less disruptive to flow
edelauna
committed
fix(esbuild): sequence rebuild calls to prevent Windows EBUSY race on asset copy
edelauna
committed
refactor(McpHub): cleanup crosswindow auths
edelauna
committed
refactor(SecretStorageService): base64 encode server endpoints to avoid collisions
edelauna
committed
refactor(callbackServer): make cancellable
edelauna
committed
fix(i18n): catalan strings
edelauna
committed
test(oauth): restoring mocked global
edelauna
committed
feat(McpOAuthClientProvider): adding callback to cancel callback server
edelauna
committed
test: feedback
edelauna
committed

Commits on Apr 26, 2026

empty commit for ci
edelauna
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: support OAuth 2.1 for streamable-http MCP servers#1

feat: support OAuth 2.1 for streamable-http MCP servers#1
edelauna wants to merge 27 commits intomainfrom
feat/mcp-oauth-streamable-http

Commits on Apr 24, 2026

feat(SecretStorageService): service for mcp hub to store access and refresh tokens

feat(callbackServer): used for OAuth 2.1 callbacks

fix(@modelcontextprotocol): overwrites

feat(McpOAuthClientProvider): implementing provider to allow OAuth for MCP servers

fix(callbackServer): removing reflected xss and updating template

fix(McpHub): not blocking on authprovider flow

refactor(McpOAuthClientProvider): do not default to openid scope

feat(McpHub): handle OAuth refresh mid tool call

fix(McpOAuthClientProvider): refresh token race condition between client_id

feat(McpHub): update OAuth Flow to be opt in and handle concurrent flows across instances

refactor(McpHub): prompt for authentication even mid tool call

refactor(callbackServer): added in i18n translations

feat(McpHub): cache whether server required OAuth or not

refactor(McpOAuthClientProvider): add TOKEN_EXPIRY_BUFFER

refactor(SecretStorageService): caching full DCR repose

refactor(McpHub): making prompt long running or dismissable

feat(McpHub): handling concurrent window auth

feat(McpHub): making oauth less disruptive to flow

fix(esbuild): sequence rebuild calls to prevent Windows EBUSY race on asset copy

refactor(McpHub): cleanup crosswindow auths

refactor(SecretStorageService): base64 encode server endpoints to avoid collisions

refactor(callbackServer): make cancellable

fix(i18n): catalan strings

test(oauth): restoring mocked global

feat(McpOAuthClientProvider): adding callback to cancel callback server

test: feedback

Commits on Apr 26, 2026

empty commit for ci