From e580b77084a26b108fde6b1f10368ee4024edb05 Mon Sep 17 00:00:00 2001 From: Elliott de Launay Date: Wed, 11 Mar 2026 14:00:33 -0400 Subject: [PATCH] refactor(McpOAuthClientProvider): do not default to openid scope --- src/services/mcp/McpOAuthClientProvider.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/services/mcp/McpOAuthClientProvider.ts b/src/services/mcp/McpOAuthClientProvider.ts index eb38b62f11..0327214be9 100644 --- a/src/services/mcp/McpOAuthClientProvider.ts +++ b/src/services/mcp/McpOAuthClientProvider.ts @@ -80,7 +80,7 @@ export class McpOAuthClientProvider implements OAuthClientProvider { const authMethods: string[] = authServerMeta?.token_endpoint_auth_methods_supported ?? [] const tokenEndpointAuthMethod = authMethods.includes("none") ? "none" : (authMethods[0] ?? "client_secret_post") const grantTypes: string[] = authServerMeta?.grant_types_supported ?? ["authorization_code", "refresh_token"] - const scopes: string[] = authServerMeta?.scopes_supported ?? ["openid"] + const scopes: string[] = authServerMeta?.scopes_supported ?? [] // Generate a CSRF state token for the OAuth flow. const state = Array.from(crypto.getRandomValues(new Uint8Array(8)))