Skip to content

6.0.1

Latest
Latest

Choose a tag to compare

View all tags
@mneudert mneudert released this 05 Nov 10:45
6.0.1
b3fbd3f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
  • Added OAuth 2.0 Protected Resource Metadata (RFC 9728) for the MCP endpoint, served at index.php?module=McpServer&action=protectedResourceMetadata. While the Matomo OAuth2 plugin is activated, the endpoint's 401 challenge now advertises it as WWW-Authenticate: Bearer realm="mcp", resource_metadata="<metadata URL>", so MCP clients can discover Matomo's OAuth2 authorization server automatically without web server rewrite rules. Without the OAuth2 plugin the challenge is unchanged and the metadata URL answers 404.
Assets 2
Loading