Commit graph

1,508 commits

Author SHA1 Message Date
Ola Hungerford
50114363d5
Merge pull request #730 from cliffhall/bump-to-version-0.16.5 0.16.5
bump version to 0.16.5
2025-08-18 08:41:38 -07:00
cliffhall
2f93d70364 bump version to 0.16.5 2025-08-18 11:37:41 -04:00
Ola Hungerford
e2fe3da358
Merge pull request #677 from JLLeitschuh/patch-1
Add warning for DANGEROUSLY_OMIT_AUTH usage
2025-08-18 08:19:52 -07:00
Cliff Hall
8be6d90830
Merge pull request #722 from cliffhall/align-oauth-flows
Align Quick OAuth Flow and Simple Connect Flow with Guided OAuth Flow behavior
2025-08-18 11:17:39 -04:00
cliffhall
28c0bf176a Update Typescript SDK version to latest 2025-08-18 11:13:49 -04:00
Ola Hungerford
44a40cdd57
Merge branch 'main' into align-oauth-flows 2025-08-18 07:49:27 -07:00
Ola Hungerford
6330cb4b17
Merge pull request #421 from olaservo/reverse-env-order-for-cli-stdio
Reverse env variable sourcing order
2025-08-18 07:08:38 -07:00
Ola Hungerford
44b4417951
Merge branch 'main' into reverse-env-order-for-cli-stdio 2025-08-18 06:57:16 -07:00
cliffhall
3adb1dd5c9 Prettier 2025-08-15 18:55:15 -04:00
cliffhall
5323d4d8f4 Fix connect button behavior for Oauth by making sure that scope is included in client metadata when client is registered.
- In auth.ts
    - in InspectorOAuthClientProvider constructor
      - add optional scope param
      - set instance var this.scope to scope param
    - in clientMetadata getter
      - add scope param set to this.scope or ""
  - in useConnection.ts
    - in handleAuthError handler
      - move instantiation of serverAuthProvider until after scope has been determined
      - pass scope to InspectorOAuthClientProvider constructor
2025-08-15 18:40:21 -04:00
cliffhall
94f44c7b57 Prettier 2025-08-15 17:19:27 -04:00
cliffhall
0831e812bb Align Quick OAuth Flow with Guided OAuth Flow behavior
- In oauth-state-machine.ts
  - in token_request transition
    - ensure resource is URL type, not string
    - this fixes Quick flow which was sending string, while guided was using proper URL type and working
2025-08-15 14:44:51 -04:00
Cliff Hall
24ef31905e
Merge pull request #701 from btiernay/feat/oauth-scope-discovery-consistency 0.16.4
feat: unify OAuth scope discovery between automatic and manual flows
2025-08-14 15:11:53 -04:00
Bobby Tiernay
739e0aaa68
fix: lint 2025-08-14 15:00:54 -04:00
Bobby Tiernay
34b39530d1
fix: failing test from SDK update 2025-08-14 14:02:29 -04:00
Bobby Tiernay
74900fca5d
feat: unify OAuth scope discovery between automatic and manual flows
- Add shared discoverScopes function in auth.ts with resource metadata preference
- Update automatic flow (handleAuthError) to use dynamic scope discovery
- Update manual flow (OAuth state machine) to use shared scope discovery logic
- Add comprehensive test suite for discoverScopes function (11 test cases)
- Fix empty array handling to return undefined instead of empty string
- Maintain backward compatibility with existing oauthScope parameter
- All quality gates pass: TypeScript, linting, formatting, and tests

Resolves OAuth scope discovery inconsistency where automatic flow used static
scopes while manual flow used metadata scopes. Both flows now use identical
shared logic with proper resource metadata preference.
2025-08-14 14:02:29 -04:00
Cliff Hall
c5047ca30a
Merge pull request #715 from modelcontextprotocol/fweinberger/fix-sensitive-local-storage
fweinberger/fix sensitive local storage
2025-08-14 13:23:44 -04:00
Felix Weinberger
36b9acc97e
fix: filter out client_secret when storing OAuth client information 2025-08-14 17:04:38 +01:00
Cliff Hall
16edf53794
Merge pull request #711 from olaservo/bump-version
Bump to 0.16.4
2025-08-13 15:28:18 -04:00
olaservo
b6af0c7f67 bump @modelcontextprotocol/sdk version to ^1.17.2 in all package.json files 2025-08-13 11:06:13 -07:00
Ola Hungerford
2a5e50ee59
Merge branch 'main' into bump-version 2025-08-13 05:51:58 -07:00
Ola Hungerford
a30e0d1fda
Merge pull request #684 from 2underscores/dcr-fallback-fix
Fix: Pre-registered Client ID as fallback to DCR
2025-08-13 05:51:39 -07:00
Ola Hungerford
ddd06c207c
Merge branch 'main' into dcr-fallback-fix 2025-08-13 05:34:14 -07:00
olaservo
2cf222a2ef Merge branch 'bump-version' of https://github.com/olaservo/inspector into bump-version 2025-08-12 20:17:46 -07:00
olaservo
fb5ce6d414 Remove local settings configuration file 2025-08-12 20:17:43 -07:00
Ola Hungerford
8da07c83f6
Merge branch 'main' into bump-version 2025-08-12 20:17:03 -07:00
olaservo
ca913eb06f Bump to 0.16.4 2025-08-12 20:16:06 -07:00
Cliff Hall
2feac764ff
Merge pull request #687 from superboy-zjc/main
fix(auth): sanitize authorization URL
2025-08-12 16:29:07 -04:00
Cliff Hall
b4d1bc71f6
Merge branch 'main' into main 2025-08-12 16:25:42 -04:00
Ola Hungerford
e36f8808e3
Merge pull request #706 from cliffhall/add-toast-for-misconfigured-logging
Add toast for misconfigured logging
2025-08-12 13:07:11 -07:00
cliffhall
0d8e8fce4b This fixes #610
* In useConnection.ts
  - During initialization, if there is an error immediately following the client sending 'logging/setLevel', pops up a toast with the message `Server declares logging capability but doesn't implement method "logging/setLevel"`
2025-08-12 15:26:15 -04:00
cliffhall
15b58c8142 This fixes #610
* In useConnection.ts
  - During initialization, if there is an error immediately following the client sending 'logging/setLevel', pops up a toast with the message `Server declares logging capability but doesn't implement method "logging/setLevel"`
2025-08-12 15:25:09 -04:00
superboy-zjc
d21e51e6ab fix(auth): sanitize authorization URL 2025-08-12 11:26:44 -07:00
Cliff Hall
618370dd08
Merge pull request #702 from 2underscores/debugger-auth-svr-metadata
Bump auth SDK to use Improved AS Discovery
2025-08-12 11:20:41 -04:00
Ola Hungerford
e604321024
Merge branch 'main' into debugger-auth-svr-metadata 2025-08-12 06:44:32 -07:00
Cliff Hall
5e6095d1fa
Merge pull request #698 from KKonstantinov/feature/inspector-oauth-client-provider-state
OAuth state parameter for InspectorOAuthClientProvider via reusable generateOAuthState helper
2025-08-12 09:24:41 -04:00
2underscores
9ef2a6c22d Use new auth svr discovery method from latest auth SDK 2025-08-12 14:13:31 +10:00
2underscores
e9f1da383e Tests for client discovery 2025-08-12 13:22:09 +10:00
2underscores
0b123acdac Static client attempt before DCR 2025-08-12 09:20:28 +10:00
Konstantin Konstantinov
60049a5b6c
reorder methods 2025-08-12 00:29:53 +03:00
Konstantin Konstantinov
929b930618
reusable generateOAuthState helper, introduce in InspectorOAuthClientProvider and in oauth-state-machine, add test 2025-08-11 21:24:26 +03:00
2underscores
37f634d651 rm console.log 2025-08-11 14:43:04 +10:00
Ola Hungerford
25f721afc4
Merge branch 'main' into dcr-fallback-fix 2025-08-10 21:08:10 -07:00
Ola Hungerford
113b612b99
Merge pull request #673 from matsjfunke/fix/fastmcp-union-types
fix: support FastMCP union types in tool parameter forms
2025-08-10 20:04:46 -07:00
Mats Julius Funke
73bf133646
Merge branch 'main' into fix/fastmcp-union-types 2025-08-10 12:01:56 +02:00
Cliff Hall
7a8da0723c
Merge pull request #692 from olaservo/bump-version 0.16.3
Bump version
2025-08-08 22:30:35 -04:00
Ola Hungerford
62926b61ff
Merge branch 'main' into bump-version 2025-08-08 18:35:10 -07:00
olaservo
b89b10beac Bump version 2025-08-08 15:46:58 -07:00
Felix Weinberger
7b3e2c19e7
Merge pull request #661 from modelcontextprotocol/fweinberger/better-config-support
feat: Auto-detect transport type from config files
2025-08-08 09:51:52 +01:00
Felix Weinberger
68319704f0
Update test to match new server selection behavior
Test 30 now expects an error when multiple servers exist, even with
"default-server" present, aligning with the simplified logic that only
auto-selects when there's exactly one server.
2025-08-07 21:02:29 +01:00