Skip to content

fix(catalog): let OAuth discovery fill missing endpoint URLs - #230

Open
0717lee wants to merge 1 commit into
contextforge-org:mainfrom
0717lee:fix/catalog-oauth-optional-urls
Open

0717lee wants to merge 1 commit into
contextforge-org:mainfrom
0717lee:fix/catalog-oauth-optional-urls

Conversation

@0717lee

@0717lee 0717lee commented Nov 6, 2026

Copy link
Copy Markdown
Contributor

Fixes IBM/mcp-context-forge#7464

Catalog registration discovers the authorization and token endpoints from the issuer, so requiring both fields blocked entries without published metadata. Empty values are now accepted; non-empty values still require http(s) URLs. Issuer, scopes, and client credentials remain required.

Validation:

  • vitest CatalogOAuthForm + ServerCatalog: 98 passed
  • npm run typecheck
  • eslint and prettier on the changed files

The catalog OAuth form required authorization and token URLs even
though registration discovers both from the issuer. Make empty values
valid while still rejecting malformed non-empty URLs. Add a regression
that submits empty endpoints for discovery.

Ref #7464

Signed-off-by: Li Fengmin <2080291162@qq.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[BUG][UI-REWRITE]: Catalog OAuth form requires authorization and token URLs the server discovers

1 participant