inspector
inspector copied to clipboard
The "Clear OAuth State" button doesn't actually seem to clear the `lastBearerToken`
Describe the bug
cc @franz-zuplo
We've encountered some irrecoverable states where we can get stuck somehow with an invalid lastBearerToken in the local storage. This then gets used during OAuth flow and does not get cleared with the "Clear OAuth State" button.
This is partially self induced as we had some misconfiguration in our OAuth provider for our MCP server which led to the broken auth state.
To Reproduce
Steps to reproduce the behavior:
- Go to your browser's local storage
- Manually edit the
lastBearerTokento something - Hit "Clear OAuth State" and see the string you set still persists
- Notice this token gets used during "Connect"
Expected behavior
The OAuth token would be completely cleared when "Clear OAuth State"