modelcontextprotocol/inspector
Watch
1
0
Fork
You've already forked inspector
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

Merge pull request #827 from modelcontextprotocol/revert-pr-715

Browse source 
Revert "fix: filter out client_secret when storing OAuth client information"
This commit is contained in:
Cliff Hall 2025-09-24 10:40:57 -04:00 • committed by GitHub
commit 861812e023
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 1 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

9
client/src/lib/auth.ts
View file

@ -157,17 +157,10 @@ export class InspectorOAuthClientProvider implements OAuthClientProvider {
} }
saveClientInformation(clientInformation: OAuthClientInformation) { saveClientInformation(clientInformation: OAuthClientInformation) {
// Remove client_secret before storing (not needed after initial OAuth flow)
const safeInfo = Object.fromEntries(
Object.entries(clientInformation).filter(
([key]) => key !== "client_secret",
),
) as OAuthClientInformation;
// Save the dynamically registered client information to session storage // Save the dynamically registered client information to session storage
saveClientInformationToSessionStorage({ saveClientInformationToSessionStorage({
serverUrl: this.serverUrl, serverUrl: this.serverUrl,
clientInformation: safeInfo, clientInformation,
isPreregistered: false, isPreregistered: false,
}); });
} }