Commit graph

1,736 commits

Author SHA1 Message Date
cliffhall
5323d4d8f4 Fix connect button behavior for Oauth by making sure that scope is included in client metadata when client is registered.
- In auth.ts
    - in InspectorOAuthClientProvider constructor
      - add optional scope param
      - set instance var this.scope to scope param
    - in clientMetadata getter
      - add scope param set to this.scope or ""
  - in useConnection.ts
    - in handleAuthError handler
      - move instantiation of serverAuthProvider until after scope has been determined
      - pass scope to InspectorOAuthClientProvider constructor
2025-08-15 18:40:21 -04:00
Ola Hungerford
f2865a36e3
Merge branch 'main' into halter73/restore-resource 2025-08-15 14:34:48 -07:00
cliffhall
94f44c7b57 Prettier 2025-08-15 17:19:27 -04:00
cliffhall
0831e812bb Align Quick OAuth Flow with Guided OAuth Flow behavior
- In oauth-state-machine.ts
  - in token_request transition
    - ensure resource is URL type, not string
    - this fixes Quick flow which was sending string, while guided was using proper URL type and working
2025-08-15 14:44:51 -04:00
Raghunath Prabhakar
e5d1fe29e5
Merge branch 'main' into docs/utils-jsdoc 2025-08-15 10:42:35 -05:00
Richard Michael
410f792d29 Remove redundant mock and timer clear 2025-08-14 14:25:51 -07:00
Richard Michael
34938b72d3 Tidy test descriptions and titles 2025-08-14 14:25:51 -07:00
Richard Michael
399e16afa4 Re-organize Sidebar tests
- Tests were mistakenly grouped in Environment Variables block
- Tests follow UI order, top-to-bottom
2025-08-14 14:25:51 -07:00
Richard Michael
9a1540c79a Trim whitespace from command query parameter 2025-08-14 14:25:51 -07:00
Richard Michael
8d8af870ba Trim whitespace from command on blur 2025-08-14 14:25:51 -07:00
Cliff Hall
24ef31905e
Merge pull request #701 from btiernay/feat/oauth-scope-discovery-consistency 0.16.4
feat: unify OAuth scope discovery between automatic and manual flows
2025-08-14 15:11:53 -04:00
Bobby Tiernay
739e0aaa68
fix: lint 2025-08-14 15:00:54 -04:00
Bobby Tiernay
34b39530d1
fix: failing test from SDK update 2025-08-14 14:02:29 -04:00
Bobby Tiernay
74900fca5d
feat: unify OAuth scope discovery between automatic and manual flows
- Add shared discoverScopes function in auth.ts with resource metadata preference
- Update automatic flow (handleAuthError) to use dynamic scope discovery
- Update manual flow (OAuth state machine) to use shared scope discovery logic
- Add comprehensive test suite for discoverScopes function (11 test cases)
- Fix empty array handling to return undefined instead of empty string
- Maintain backward compatibility with existing oauthScope parameter
- All quality gates pass: TypeScript, linting, formatting, and tests

Resolves OAuth scope discovery inconsistency where automatic flow used static
scopes while manual flow used metadata scopes. Both flows now use identical
shared logic with proper resource metadata preference.
2025-08-14 14:02:29 -04:00
Stephen Halter
10b4681e3c Also fix authorizationUrl type 2025-08-14 10:47:15 -07:00
Cliff Hall
c5047ca30a
Merge pull request #715 from modelcontextprotocol/fweinberger/fix-sensitive-local-storage
fweinberger/fix sensitive local storage
2025-08-14 13:23:44 -04:00
Phil Freo
d7927ec8dc
Add documentation for CLI header support
- Document --header flag usage with examples
- Explain header format requirements
- Clarify transport support (HTTP, SSE, not STDIO)
- Add authentication examples with API keys and bearer tokens
2025-08-14 12:20:40 -04:00
Phil Freo
da5595fb3a
Add client/e2e/test-results/ to .gitignore 2025-08-14 12:10:22 -04:00
Phil Freo
755f31f109
Add Claude settings to prettierignore 2025-08-14 12:10:22 -04:00
Phil Freo
77d4963b8a
Add support for --header flags in MCP Inspector CLI
- Add --header option to both wrapper CLI (cli.ts) and main CLI (index.ts)
- Support multiple headers with "HeaderName: Value" format validation
- Pass headers to HTTP and SSE transports via requestInit.headers
- Add parseHeaderPair function for proper header parsing
- Fix output truncation issue by removing forced process.exit(0)
- Update types to include headers in Args and TransportOptions

Usage: --header "Authorization: Bearer token" --header "X-Custom: value"
2025-08-14 12:10:18 -04:00
Felix Weinberger
36b9acc97e
fix: filter out client_secret when storing OAuth client information 2025-08-14 17:04:38 +01:00
Stephen Halter
fc4aeb392f Restore AuthDebuggerState.resource as URL
Not doing so prevents the resource URI from getting sent to the
OAuth server's token endpoint during the "Quick OAuth flow"
2025-08-13 14:00:08 -07:00
Cliff Hall
16edf53794
Merge pull request #711 from olaservo/bump-version
Bump to 0.16.4
2025-08-13 15:28:18 -04:00
Raghunath Prabhakar
85c86de61e chore: add jsdoc comments to utils 2025-08-13 14:14:32 -05:00
olaservo
b6af0c7f67 bump @modelcontextprotocol/sdk version to ^1.17.2 in all package.json files 2025-08-13 11:06:13 -07:00
Ola Hungerford
2a5e50ee59
Merge branch 'main' into bump-version 2025-08-13 05:51:58 -07:00
Ola Hungerford
a30e0d1fda
Merge pull request #684 from 2underscores/dcr-fallback-fix
Fix: Pre-registered Client ID as fallback to DCR
2025-08-13 05:51:39 -07:00
Ola Hungerford
ddd06c207c
Merge branch 'main' into dcr-fallback-fix 2025-08-13 05:34:14 -07:00
Minh-Phuc Tran
b7b62af282
Merge branch 'main' into update-dependencies 2025-08-13 11:33:05 +07:00
olaservo
2cf222a2ef Merge branch 'bump-version' of https://github.com/olaservo/inspector into bump-version 2025-08-12 20:17:46 -07:00
olaservo
fb5ce6d414 Remove local settings configuration file 2025-08-12 20:17:43 -07:00
Ola Hungerford
8da07c83f6
Merge branch 'main' into bump-version 2025-08-12 20:17:03 -07:00
olaservo
ca913eb06f Bump to 0.16.4 2025-08-12 20:16:06 -07:00
Cliff Hall
2feac764ff
Merge pull request #687 from superboy-zjc/main
fix(auth): sanitize authorization URL
2025-08-12 16:29:07 -04:00
Cliff Hall
b4d1bc71f6
Merge branch 'main' into main 2025-08-12 16:25:42 -04:00
Ola Hungerford
e36f8808e3
Merge pull request #706 from cliffhall/add-toast-for-misconfigured-logging
Add toast for misconfigured logging
2025-08-12 13:07:11 -07:00
cliffhall
0d8e8fce4b This fixes #610
* In useConnection.ts
  - During initialization, if there is an error immediately following the client sending 'logging/setLevel', pops up a toast with the message `Server declares logging capability but doesn't implement method "logging/setLevel"`
2025-08-12 15:26:15 -04:00
cliffhall
15b58c8142 This fixes #610
* In useConnection.ts
  - During initialization, if there is an error immediately following the client sending 'logging/setLevel', pops up a toast with the message `Server declares logging capability but doesn't implement method "logging/setLevel"`
2025-08-12 15:25:09 -04:00
superboy-zjc
d21e51e6ab fix(auth): sanitize authorization URL 2025-08-12 11:26:44 -07:00
Cliff Hall
618370dd08
Merge pull request #702 from 2underscores/debugger-auth-svr-metadata
Bump auth SDK to use Improved AS Discovery
2025-08-12 11:20:41 -04:00
Ola Hungerford
e604321024
Merge branch 'main' into debugger-auth-svr-metadata 2025-08-12 06:44:32 -07:00
Cliff Hall
5e6095d1fa
Merge pull request #698 from KKonstantinov/feature/inspector-oauth-client-provider-state
OAuth state parameter for InspectorOAuthClientProvider via reusable generateOAuthState helper
2025-08-12 09:24:41 -04:00
phuctm97
f914f61463 Update dependencies in client package.json
Updated client dependencies to ensure compatibility with latest versions.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-08-12 14:17:41 +07:00
2underscores
9ef2a6c22d Use new auth svr discovery method from latest auth SDK 2025-08-12 14:13:31 +10:00
2underscores
e9f1da383e Tests for client discovery 2025-08-12 13:22:09 +10:00
2underscores
0b123acdac Static client attempt before DCR 2025-08-12 09:20:28 +10:00
Konstantin Konstantinov
60049a5b6c
reorder methods 2025-08-12 00:29:53 +03:00
Konstantin Konstantinov
929b930618
reusable generateOAuthState helper, introduce in InspectorOAuthClientProvider and in oauth-state-machine, add test 2025-08-11 21:24:26 +03:00
Ola Hungerford
30a7d5e484
Merge branch 'main' into parse-tool-arg 2025-08-11 08:01:53 -07:00
2underscores
37f634d651 rm console.log 2025-08-11 14:43:04 +10:00