Merge pull request #827 from modelcontextprotocol/revert-pr-715

Revert "fix: filter out client_secret when storing OAuth client information"
This commit is contained in:
Cliff Hall 2025-09-24 10:40:57 -04:00 • committed by GitHub
commit 861812e023
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -157,17 +157,10 @@ export class InspectorOAuthClientProvider implements OAuthClientProvider {
}
saveClientInformation(clientInformation: OAuthClientInformation) {
// Remove client_secret before storing (not needed after initial OAuth flow)
const safeInfo = Object.fromEntries(
Object.entries(clientInformation).filter(
([key]) => key !== "client_secret",
),
) as OAuthClientInformation;
// Save the dynamically registered client information to session storage
saveClientInformationToSessionStorage({
serverUrl: this.serverUrl,
clientInformation: safeInfo,
clientInformation,
isPreregistered: false,
});
}