LibreChat/packages/api/src/mcp/oauth
Danny Avila 344e7c44b5
🔐 fix: Respect Server's Token Endpoint Auth Methods for MCP OAuth Refresh (#9717)
* fix: respect server's token endpoint auth methods for MCP OAuth refresh

Previously, LibreChat always used Basic Auth when refreshing OAuth tokens if a
client_secret was present. This caused issues with servers (like FastMCP) that
only support client_secret_post. Now properly checks and respects the server's
advertised token_endpoint_auth_methods_supported.

Fixes token refresh failures with error: "refresh_token.client_id: Field required"

* chore: remove MCP OAuth URL Logging
2025-09-19 06:50:02 -04:00
..
detectOAuth.ts ♻️ refactor: MCPManager for Scalability, Fix App-Level Detection, Add Lazy Connections (#8930) 2025-08-13 11:45:06 -04:00
handler.ts 🔐 fix: Respect Server's Token Endpoint Auth Methods for MCP OAuth Refresh (#9717) 2025-09-19 06:50:02 -04:00
index.ts ♻️ refactor: MCPManager for Scalability, Fix App-Level Detection, Add Lazy Connections (#8930) 2025-08-13 11:45:06 -04:00
OAuthReconnectionManager.test.ts 💫 feat: MCP OAuth Auto-Reconnect (#9646) 2025-09-17 16:49:36 -04:00
OAuthReconnectionManager.ts 💫 feat: MCP OAuth Auto-Reconnect (#9646) 2025-09-17 16:49:36 -04:00
OAuthReconnectionTracker.test.ts 💫 feat: MCP OAuth Auto-Reconnect (#9646) 2025-09-17 16:49:36 -04:00
OAuthReconnectionTracker.ts 💫 feat: MCP OAuth Auto-Reconnect (#9646) 2025-09-17 16:49:36 -04:00
tokens.ts 🔌 feat: Revoke MCP OAuth Credentials (#9464) 2025-09-10 18:53:34 -04:00
types.ts 🔌 feat: Revoke MCP OAuth Credentials (#9464) 2025-09-10 18:53:34 -04:00