modelcontextprotocol/inspector
Watch
1
0
Fork
You've already forked inspector
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

feat(web,core): enterprise-managed authorization (EMA) (#1509) (#1512)

Browse source 
Adds enterprise-managed authorization (EMA): browser-side IdP login + RFC 8693 token-exchange and JWT-bearer resource-token mint, per-server EMA opt-in in Server Settings, IdP config in Client Settings, and IdP clientSecret keychain storage. Includes the v2/main merge and review follow-ups (400 on malformed client config; normalizeIdpIssuer import consolidation).
This commit is contained in:
Bob Dickinson 2026-06-24 19:15:12 -07:00 • committed by GitHub
commit 5de4e911e3
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 7585 additions and 595 deletions
Download patch file Download diff file Expand all files Collapse all files

2
clients/web/src/utils/oauthFlow.ts
View file

@ -14,7 +14,7 @@ export const OAUTH_CALLBACK_PATH = "/oauth/callback";
/**
* sessionStorage key holding the id of the server whose OAuth flow is in
* flight. The OAuth `state` parameter only carries `{mode}:{authId}`, not which
* flight. The OAuth `state` parameter only carries `{execution}:{authId}`, not which
* configured server initiated the flow, and the full-page redirect to the auth
* server wipes all in-memory React state. The id is stashed here right before
* redirecting so the post-callback page load can rebuild the right