Skip to content

fix(client): allow native loopback OAuth redirects - #52

Merged
kauandotnet merged 1 commit into
mainfrom
codex/oauth-loopback-redirect
Sep 3, 2026
Merged

fix(client): allow native loopback OAuth redirects#52
kauandotnet merged 1 commit into
mainfrom
codex/oauth-loopback-redirect

Conversation

@kauandotnet

@kauandotnet kauandotnet commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

Summary

  • accept RFC 8252 loopback HTTP redirect URIs when building OAuth authorization requests
  • preserve HTTPS-only redirects for web clients and reject non-loopback HTTP callbacks
  • cover authorization and token exchange with an IPv4 loopback callback

Verification

  • pnpm --filter @nestm/mcp-client test -- oauth-protocol.test.ts
  • pnpm --filter @nestm/mcp-client typecheck
  • pnpm run verify

@kauandotnet
kauandotnet merged commit cef3efa into main Sep 3, 2026
5 checks passed
@kauandotnet
kauandotnet deleted the codex/oauth-loopback-redirect branch September 3, 2026 23:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@kauandotnet