-
Notifications
You must be signed in to change notification settings - Fork 1k
Description
The "Quick OAuth Flow" button in the Auth Debugger currently uses the DebugInspectorOAuthClientProvider which redirects to /oauth/callback/debug (manual copy-paste flow) instead of the regular InspectorOAuthClientProvider which redirects to /oauth/callback (automatic flow).
Steps to reproduce
- Configure an MCP server with OAuth authentication
- Click "Quick OAuth Flow" in the Auth Debugger
- Complete authentication on the OAuth server
- Get redirected to
/oauth/callback/debugwith manual copy-paste instructions - Expected: Should redirect to
/oauth/callbackand automatically complete the flow
Expected behavior
The "Quick OAuth Flow" should use the automatic callback (/oauth/callback) to provide a seamless authentication experience, automatically redirecting back to the inspector after successful authentication.
Current behavior
The "Quick OAuth Flow" uses the debug callback (/oauth/callback/debug) which requires manual code copying, making it no different from the "Guided OAuth Flow".
Technical details
- The issue is in
AuthDebugger.tsxline 152 andoauth-state-machine.tsline 200 - Both create a
DebugInspectorOAuthClientProviderinstead ofInspectorOAuthClientProvider - The debug provider hardcodes the redirect URL to
/oauth/callback/debug
Suggested fix
For the "Quick OAuth Flow", use InspectorOAuthClientProvider instead of DebugInspectorOAuthClientProvider to enable automatic callback handling.