rust-sdk/crates
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Sarthak Bhardwaj 5837e225d3
fix(auth): preserve refresh_token when refresh response omits it (#949)
Per RFC 6749 section 6 and OAuth 2.1: when the server does not issue a new
refresh_token on a refresh response, the client MUST keep the existing one.
AuthorizationManager::refresh_token() was persisting the response verbatim,
dropping the previous refresh_token and forcing full re-authorization on
the next refresh.

Match the fix from python-sdk#2270: preserve the existing refresh_token
when the response omits it, replace when the server rotates.

Fixes #921

Signed-off-by: SarthakB11 <sarthak.bhardwaj21b@iiitg.ac.in>
2026-07-02 08:44:59 -04:00
..
rmcp fix(auth): preserve refresh_token when refresh response omits it (#949) 2026-07-02 08:44:59 -04:00
rmcp-macros chore: release v2.0.0 (#920) 2026-06-29 08:24:11 -04:00