mcp-data-platform-v0.13.4

Revert Regression: Restore OIDC prompt=none Silent SSO

PR #55 (v0.13.2) incorrectly removed the prompt=none silent SSO pattern that PR #13 originally added to handle the Keycloak "Already logged in" dead-end page. This release reverts that regression.

Background

The prompt=none + login_required fallback pattern was added in PR #13 to work around keycloak#12406 on Keycloak < 23.0. PR #55 removed it and replaced it with prompt=login, which reintroduced the dead-end page.

What This Release Does

Restores the original two-step OIDC silent SSO pattern from PR #13:

1. Redirect to upstream IdP with prompt=none -- if the user has an active session, the IdP silently issues an authorization code (SSO without UI)
2. If the IdP returns error=login_required (no active session), retry without prompt so the IdP shows its login form

A PromptNoneAttempted flag on the authorization state prevents infinite redirect loops.

Pull Requests

• #58 Restore OIDC prompt=none silent SSO with login_required fallback

Changelog

Others

• cd04052: Restore OIDC prompt=none silent SSO with login_required fallback (#58) (@cjimti)

Installation

Homebrew (macOS)

brew install txn2/tap/mcp-data-platform

Claude Code CLI

claude mcp add mcp-data-platform -- mcp-data-platform

Docker

docker pull ghcr.io/txn2/mcp-data-platform:v0.13.4

Verification

All release artifacts are signed with Cosign. Verify with:

cosign verify-blob --bundle mcp-data-platform_0.13.4_linux_amd64.tar.gz.sigstore.json \
  mcp-data-platform_0.13.4_linux_amd64.tar.gz