Files
zed/crates
Tom Houlé db2dd21cd3 context_server: Handle bad WWW-Authenticate resource_metadata URLs (#53502)
In MCP OAuth, when the resource_metadata URL from the WWW-Authenticate
header from the MCP server is on the same origin, but points to a broken
endpoint (for example Pydantic Logfire doubles the path component,
producing /mcp/mcp), fall back to the RFC 9728 well-known URIs instead
of failing outright. The header URL is still tried first, as per the MCP
spec.

Release Notes:

- MCP OAuth: Handle bad URLs in WWW-Authenticate by falling back to the
well known authorization server metadata URLs.
2026-05-18 12:48:55 +00:00
..
2026-05-04 06:30:47 +00:00
2026-04-29 10:27:47 +00:00
2026-04-29 10:27:47 +00:00
2026-05-04 06:30:47 +00:00
2026-05-15 21:34:20 +00:00
2026-04-29 10:27:47 +00:00
2026-04-29 10:27:47 +00:00
2026-05-07 09:56:04 +00:00