LibreChat/api
Danny Avila 344e7c44b5
🔐 fix: Respect Server's Token Endpoint Auth Methods for MCP OAuth Refresh (#9717)
* fix: respect server's token endpoint auth methods for MCP OAuth refresh

Previously, LibreChat always used Basic Auth when refreshing OAuth tokens if a
client_secret was present. This caused issues with servers (like FastMCP) that
only support client_secret_post. Now properly checks and respects the server's
advertised token_endpoint_auth_methods_supported.

Fixes token refresh failures with error: "refresh_token.client_id: Field required"

* chore: remove MCP OAuth URL Logging
2025-09-19 06:50:02 -04:00
..
app 🎚️ feat: Anthropic Parameter Set Support via Custom Endpoints (#9415) 2025-09-08 14:35:29 -04:00
cache 🚨 fix: Redis CA file handling (#9692) 2025-09-18 20:33:40 -04:00
config 💫 feat: MCP OAuth Auto-Reconnect (#9646) 2025-09-17 16:49:36 -04:00
db 🍃 feat: Add MongoDB Connection Pool Configuration Options (#8537) 2025-08-13 16:24:17 -04:00
lib/utils 🏗️ refactor: Extract DB layers to data-schemas for shared use (#7650) 2025-05-30 22:18:13 -04:00
models 🔄 refactor: Convert OCR Tool Resource to Context (#9699) 2025-09-18 20:06:59 -04:00
server 🔐 fix: Respect Server's Token Endpoint Auth Methods for MCP OAuth Refresh (#9717) 2025-09-19 06:50:02 -04:00
strategies 🔒 refactor: Optimize Email Domain Validation in OpenID, SAML, and Social Logins (#9567) 2025-09-11 01:01:58 -04:00
test 🛜 refactor: Streamline App Config Usage (#9234) 2025-08-26 12:10:18 -04:00
utils 🎚️ feat: Anthropic Parameter Set Support via Custom Endpoints (#9415) 2025-09-08 14:35:29 -04:00
jest.config.js 🏪 feat: Agent Marketplace 2025-08-13 16:24:18 -04:00
jsconfig.json feat(api): initial Redis support; fix(SearchBar): proper debounce (#1039) 2023-10-11 17:05:47 -04:00
package.json v0.8.0-rc4 (#9601) 2025-09-12 13:37:10 -04:00
typedefs.js 🔃 fix: Refresh Token Edge Cases (#9625) 2025-09-13 21:36:45 -04:00