inspector icon indicating copy to clipboard operation
inspector copied to clipboard

Quick OAuth Flow uses debug callback URL instead of automatic callback

Open phernandez opened this issue 6 months ago • 0 comments

The "Quick OAuth Flow" button in the Auth Debugger currently uses the DebugInspectorOAuthClientProvider which redirects to /oauth/callback/debug (manual copy-paste flow) instead of the regular InspectorOAuthClientProvider which redirects to /oauth/callback (automatic flow).

Steps to reproduce

  1. Configure an MCP server with OAuth authentication
  2. Click "Quick OAuth Flow" in the Auth Debugger
  3. Complete authentication on the OAuth server
  4. Get redirected to /oauth/callback/debug with manual copy-paste instructions
  5. Expected: Should redirect to /oauth/callback and automatically complete the flow

Expected behavior

The "Quick OAuth Flow" should use the automatic callback (/oauth/callback) to provide a seamless authentication experience, automatically redirecting back to the inspector after successful authentication.

Current behavior

The "Quick OAuth Flow" uses the debug callback (/oauth/callback/debug) which requires manual code copying, making it no different from the "Guided OAuth Flow".

Technical details

  • The issue is in AuthDebugger.tsx line 152 and oauth-state-machine.ts line 200
  • Both create a DebugInspectorOAuthClientProvider instead of InspectorOAuthClientProvider
  • The debug provider hardcodes the redirect URL to /oauth/callback/debug

Suggested fix

For the "Quick OAuth Flow", use InspectorOAuthClientProvider instead of DebugInspectorOAuthClientProvider to enable automatic callback handling.

phernandez avatar Jul 09 '25 23:07 phernandez