v2.4.1

What's Changed

Other Changes

• Bump MishaKav/jest-coverage-comment from 1.0.34 to 1.0.36 by @dependabot[bot] in #68
• Bump github/codeql-action/upload-sarif from 4.37.4 to 4.37.5 by @dependabot[bot] in #69
• Bump github/codeql-action/upload-sarif from 4.37.5 to 4.37.6 by @dependabot[bot] in #71
• Bump the dev-dependencies group with 3 updates by @dependabot[bot] in #70
• Bump typescript-eslint from 8.66.0 to 8.67.0 in the dev-dependencies group by @dependabot[bot] in #72
• Bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 by @dependabot[bot] in #73
• Bump docker/setup-buildx-action from 4.2.0 to 4.3.0 by @dependabot[bot] in #74
• dependency security patches by @velias in #75
• Bump the dev-dependencies group with 3 updates by @dependabot[bot] in #76
• Bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.8 by @dependabot[bot] in #77
• Bump qs from 6.15.2 to 6.16.0 by @dependabot[bot] in #78
• Bump softprops/action-gh-release from 3.0.2 to 3.0.3 by @dependabot[bot] in #79
• Bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9 by @dependabot[bot] in #81
• Bump the dev-dependencies group with 3 updates by @dependabot[bot] in #80
• Org migration metadata and bump to 2.4.1 by @velias in #83

Full Changelog: v2.4.0...v2.4.1

v2.4.0

What's Changed

Features

• DPoP (RFC 9449) support added if upstream IdP supports it by @velias in #61
• PAR (RFC 9126) support added if upstream IdP advertises it by @velias in #62
• Hardened OAuth redirect handling and outbound fetches against open-redirect / SSRF class issues. by @velias in #67
  • Reject HTTP redirects when fetching upstream well-known and health probes (redirect: 'error')
  • Validate CIMD redirect_uris (and authorize/PAR CIMD redirects) with shared URI security checks; block dangerous schemes (javascript:, data:, etc.)
  • Make redirect allowlist wildcards host-aware: http://host/* / http://host/:* still allow any port/path, but domain-extension matches (host.evil.com) are rejected
  • Treat IPv6-mapped private addresses in hex form (::ffff:7f00:1) as private for CIMD SSRF checks

Full Changelog: v2.3.0...v2.4.0

v2.3.0

What's Changed

Features

• Possibility to map DCR Client Name to different IdP Clients by @velias in #48
• All client request validation problems are now logged as warn for better supportability by @velias in #48
• Composite health check added by @velias in #49

Other Changes

• Bump the dev-dependencies group across 1 directory with 5 updates by @dependabot[bot] in #50

Full Changelog: v2.2.1...v2.3.0

Deployment notes

• If you have Prometheus dashboards or alerts referencing mcp_auth_* metrics, review them for the new idp_client label dimension.
• The new /health endpoint should be blocked from public internet access.

v2.2.1

What's Changed

Features

• Logged values are always quoted for consistent parsing by @velias in #43

Other Changes

• Bump the dev-dependencies group with 3 updates by @dependabot[bot] in #42

Full Changelog: v2.2.0...v2.2.1

v2.2.0

What's Changed

Features

• access logging added by @velias in #36

Other Changes

• Tests migrated from jest to vitest by @velias in #32
• Bump esbuild, @vitest/coverage-v8 and vitest by @dependabot[bot] in #33
• Bump the dev-dependencies group with 2 updates by @dependabot[bot] in #35

Full Changelog: v2.1.0...v2.2.0

v2.1.0

What's Changed

Features

• Full 'OAuth Client Credentials' MCP Spec extension support by @velias in #27
• Improved Resource Parameter Validation (RFC 8707) by @velias in #29
• Prometheus metrics improvements by @velias in #30
• Performance optimizations by @velias in #31

Other Changes

• Bump the dev-dependencies group with 2 updates by @dependabot[bot] in #24
• Bump form-data from 4.0.5 to 4.0.6 by @dependabot[bot] in #25
• updated @babel/core dev dependency by @velias in #26

Full Changelog: v2.0.0...v2.1.0

v2.0.0

What's Changed

BREAKING CHANGES

• MCP_PROXY_AUTH_STATE_SECRET is now required when the authorize proxy is active (scope filtering, CIMD, or standalone iss interception). Existing deployments must add this variable — generate with openssl rand -hex 32.
• MCP_PROXY_AUTH_ALLOWED_REDIRECT_URIS is now required for non-CIMD-only deployments. Configure allowed MCP client redirect URI patterns (see README for known client patterns).
• token_endpoint in well-known metadata is now rewritten to the adapter's URL when the authorize proxy is active (was only for CIMD).
• Upstream IdP client must register {MCP_BASE_URL}/authorize/callback as an allowed redirect URI.

Features

• RFC 9207 iss parameter compliance — intercepts upstream IdP authorization responses to provide correct issuer identification, preventing mix-up attack rejections by MCP clients enforcing the 2026-07-28 MCP Auth Spec Draft
• Unified token proxy — /token is now always proxied when the authorize proxy is active, handling redirect_uri rewriting for authorization code grants
• Zero-downtime secret rotation via MCP_PROXY_AUTH_STATE_SECRET_PREVIOUS
• Configurable state blob TTL via MCP_PROXY_AUTH_STATE_TTL_MINUTES (default 30 min)
• Shared URI security validation — tightened redirect_uri checks (control chars, userinfo rejection) across DCR and authorize endpoints

Full Changelog: v1.0.1...v2.0.0

v1.0.1

What's Changed

Features

• Improved DRC request validation

Other Changes

• Bump qs from 6.15.1 to 6.15.2
• Bump the dev-dependencies and Github actions

Full Changelog: v1.0.0...v1.0.1

v1.0.0

What's Changed

Features

• Container image
• Prometheus metrics exposed
• Graceful Shutdown

Other Changes

• Security hardening, OWASP review
• Different small improvements - configuration validations, runtime hardening
• Multiple runtime and dev dependencies bumped to latest versions

Full Changelog: v0.2.0...v1.0.0

v0.2.0

What's Changed

Features

• Initial version with many basic features - DCR, scopes filtering, CIMD

Full Changelog: https://github.com/velias/mcp-auth-adapter/commits/v0.2.0