Skip to content

mcp-auth v0.3.1

Choose a tag to compare

View all tags
@Agent-Hellboy Agent-Hellboy released this 22 Sep 16:17
· 16 commits to main since this release
v0.3.1
5de56b8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Patch release for the validated Cursor + Databricks MCP OAuth flow.

  • Fix consent-page CSP blocking the redirect to the upstream identity provider.
  • Add an explicit per-connector id_token_nonce_policy: "disabled" compatibility setting for providers whose ID tokens do not carry a nonce claim; nonce verification remains required by default.
  • Document the compatibility setting and preserve one-time state plus S256 PKCE binding.
Assets 2
Loading