Repository navigation
Atlassian MCP OAuth authentication broken in 1.0.80 (RFC 8414 §3.3 regression) #4490
Description
Activity
This is the same issue as in #4439.
This also breaks agentgateway's support for MCP OAuth with Entra ID. Please make this check configurable.
Reacted by O. BacakSee modelcontextprotocol/typescript-sdk#2344 and its
skipIssuerValidationoption.Same RFC 8414 §3.3 failure on SAP LeanIX MCP (Copilot 1.0.80). Unlike Atlassian, there is no working
authv2URL.Official / generic endpoint:
- MCP:
https://mcp.leanix.net/services/mcp-server/v1/mcp - advertised
authorization_servers:https://mcp.leanix.net/services/mcp-server/v1 - AS metadata
issuer:https://mcp.leanix.net
- MCP:
Fixed in 1.0.81 (first build:
cli-1.0.81-1).
Describe the bug
Authentication failed: MCPOAuthError: Incompatible authorization server: authorization server advertised an issuer that does not match the URL its metadata was discovered from (RFC 8414 §3.3); refusing to connect.
Affected version
1.0.80 (worked in 1.0.78)
Steps to reproduce the behavior
Expected behavior
OAuth browser redirect opens and authentication completes (worked in 1.0.78)
Additional context
Version: 1.0.80 (worked in 1.0.78)
OS: Windows 11
MCP Server: Atlassian HTTP MCP ( https://mcp.atlassian.com/v1/mcp )