Description
The "Quick OAuth Flow" button in the Auth Debugger currently uses the DebugInspectorOAuthClientProvider
which redirects to /oauth/callback/debug
(manual copy-paste flow) instead of the regular InspectorOAuthClientProvider
which redirects to /oauth/callback
(automatic flow).
Steps to reproduce
- Configure an MCP server with OAuth authentication
- Click "Quick OAuth Flow" in the Auth Debugger
- Complete authentication on the OAuth server
- Get redirected to
/oauth/callback/debug
with manual copy-paste instructions - Expected: Should redirect to
/oauth/callback
and automatically complete the flow
Expected behavior
The "Quick OAuth Flow" should use the automatic callback (/oauth/callback
) to provide a seamless authentication experience, automatically redirecting back to the inspector after successful authentication.
Current behavior
The "Quick OAuth Flow" uses the debug callback (/oauth/callback/debug
) which requires manual code copying, making it no different from the "Guided OAuth Flow".
Technical details
- The issue is in
AuthDebugger.tsx
line 152 andoauth-state-machine.ts
line 200 - Both create a
DebugInspectorOAuthClientProvider
instead ofInspectorOAuthClientProvider
- The debug provider hardcodes the redirect URL to
/oauth/callback/debug
Suggested fix
For the "Quick OAuth Flow", use InspectorOAuthClientProvider
instead of DebugInspectorOAuthClientProvider
to enable automatic callback handling.