modelcontextprotocol/inspector
Watch
1
0
Fork
You've already forked inspector
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

fix(auth): await OAuth storage load() to fix remote OAuth races

Browse source
This commit is contained in:
Bob Dickinson 2026-07-03 14:18:00 -07:00
commit a24091484c
2 changed files with 245 additions and 133 deletions
Download patch file Download diff file Expand all files Collapse all files

4
core/mcp/inspectorClient.ts
View file

@ -3064,8 +3064,8 @@ export class InspectorClient extends InspectorClientEventTarget {
/**
* Clears OAuth tokens and client information
*/
clearOAuthTokens(): void {
this.oauthManager?.clearOAuthTokens();
async clearOAuthTokens(): Promise<void> {
await this.oauthManager?.clearOAuthTokens();
}
/**

6
core/mcp/oauthManager.ts
View file

@ -282,6 +282,8 @@ export class OAuthManager {
iss?: string,
): Promise<void> {
try {
await this.requireStorage().load();
if (this.isEnterpriseManaged()) {
const scopeForMint =
this.pendingAuthorizationScope ?? this.getEmaFlowConfig().scope;
@ -387,13 +389,13 @@ export class OAuthManager {
}
}
clearOAuthTokens(): void {
async clearOAuthTokens(): Promise<void> {
if (!this.oauthConfig?.storage) {
return;
}
const serverUrl = this.getServerUrl();
this.oauthConfig.storage.clear(serverUrl);
await this.oauthConfig.storage.clear(serverUrl);
this.oauthFlowState = null;
this.pendingAuthorizationScope = undefined;