OOOOOAO
1a6503a520
fix(mcp): thread RFC 9207 iss through every OAuth callback relay
...
mcp 2.x rejects an authorization response that omits the RFC 9207 `iss`
parameter when the authorization server advertised
`authorization_response_iss_parameter_supported`. Cloudflare advertises it
AND sends it; the CLI loopback handler has always forwarded it, but every
other callback producer parsed only code/state/error, so the SDK raised:
OAuthFlowError: Authorization response missing iss parameter
advertised by the authorization server
and the server parked. Same machine, same config, `hermes mcp login <name>`
from a terminal succeeded — the failure is specific to the non-CLI relays.
Forward `iss` on every producer, matching `_make_callback_handler()`:
- tools/mcp_dashboard_oauth.py: `deliver_callback()` accepts `iss`;
`wait_for_callback()` returns `(code, state, iss)`. The bridge in
tools/mcp_oauth.py already splats that tuple into
`_authorization_code_result(code, state, iss)`, so it needs no change.
- tui_gateway/mcp_oauth_sessions.py: the gateway-hosted loopback listener
parses `iss`, and `deliver_callback_flow()` forwards it.
- tui_gateway/methods_tools.py: the `oauth.callback` RPC passes `iss`.
- hermes_cli/web_routers/mcp.py: the dashboard callback route accepts it.
- apps/desktop/electron/mcp-oauth-callback-ipc.ts: the one-shot listener
reads `iss` off the redirect (the renderer already spreads the whole
callback object into the RPC, so it flows through unchanged).
Providers that omit `iss` round-trip as `None`/`null` rather than being
dropped, so servers that do not advertise RFC 9207 keep working.
Verified live on Windows against mcp.cloudflare.com, whose metadata sets
`authorization_response_iss_parameter_supported: true`: the server that
previously parked on the missing-iss error now reports
`Authenticated — 3452 tool(s) available` and `hermes mcp test cloudflare`
connects. State-mismatch and replay rejection are unchanged.
Tests (each fails on base, passes with the fix):
- test_dashboard_flow_preserves_rfc9207_iss
- test_deliver_callback_forwards_iss (client-redirect relay)
- test_loopback_listener_forwards_iss (real HTTP redirect)
- two vitest cases on the Electron listener, incl. the iss-absent case
Refs #92758 , #99984 . PR #92765 fixes the dashboard route and the loopback
listener but not the client-redirect relay
(`deliver_callback_flow` / `oauth.callback` / the Electron listener), which
is the path Desktop drives against a remote backend.
2026-09-15 13:00:12 +05:30
..
2026-09-13 05:21:02 -07:00
2026-09-03 02:27:52 +05:30
2026-09-13 21:04:45 -07:00
2026-09-07 08:13:38 -07:00
2026-09-03 13:49:57 -07:00
2026-09-03 13:49:57 -07:00
2026-09-07 14:30:41 -07:00
2026-09-05 06:07:21 -07:00
2026-09-03 13:49:57 -07:00
2026-09-03 13:49:57 -07:00
2026-09-03 13:49:57 -07:00
2026-09-03 13:49:57 -07:00
2026-09-03 13:49:57 -07:00
2026-09-03 13:49:57 -07:00
2026-09-12 22:03:19 -07:00
2026-09-05 06:12:37 -07:00
2026-09-11 06:24:54 -07:00
2026-09-12 20:43:42 -07:00
2026-09-11 11:19:53 +05:30
2026-09-03 13:30:27 -07:00
2026-09-03 13:49:57 -07:00
2026-09-10 10:27:07 -07:00
2026-09-13 21:13:23 -07:00
2026-09-14 17:04:56 -07:00
2026-09-06 13:08:31 -07:00
2026-09-07 08:15:32 -07:00
2026-09-14 21:18:47 +05:30
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-12 08:43:28 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:25:33 -07:00
2026-09-13 14:41:26 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-06 23:31:05 +05:30
2026-09-03 14:18:25 -07:00
2026-09-08 05:10:57 -07:00
2026-09-08 05:10:57 -07:00
2026-09-10 10:35:07 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 14:18:25 -07:00
2026-09-13 14:41:26 -07:00
2026-09-03 14:18:25 -07:00
2026-09-13 09:18:02 -07:00
2026-09-02 14:44:15 -07:00
2026-09-07 06:00:46 -07:00
refactor(tools): first-wave simplification of tools/ (file ops split, lazy_deps, code_exec, approval, browser, delegate, mcp, skills, terminal, voice, media)
2026-09-02 14:43:45 -07:00
2026-09-12 21:50:30 -07:00
2026-09-12 21:50:30 -07:00
2026-09-03 13:49:57 -07:00
2026-09-14 16:13:51 -07:00
2026-09-03 13:24:04 -07:00
2026-09-03 13:24:04 -07:00
2026-09-13 05:09:06 -07:00
2026-09-05 18:46:53 +05:30
2026-09-10 10:35:07 -07:00
2026-09-03 13:49:57 -07:00
2026-09-13 09:18:02 -07:00
2026-09-14 21:18:47 +05:30
2026-09-13 05:21:02 -07:00
2026-09-13 05:21:02 -07:00
2026-09-13 05:21:02 -07:00
2026-09-03 13:22:51 -07:00
2026-09-03 13:22:51 -07:00
2026-09-13 05:21:02 -07:00
2026-09-03 17:45:53 -07:00
2026-09-03 13:22:51 -07:00
2026-09-03 13:22:51 -07:00
2026-09-14 07:21:18 -07:00
2026-09-14 17:34:31 -07:00
2026-09-15 00:41:13 +05:30
2026-09-15 00:41:13 +05:30
2026-09-15 00:41:14 +05:30
2026-09-15 00:41:13 +05:30
2026-09-15 00:41:13 +05:30
2026-09-15 00:41:14 +05:30
2026-09-15 00:41:13 +05:30
2026-09-14 22:01:32 +00:00
2026-09-15 00:41:14 +05:30
2026-09-15 00:41:14 +05:30
2026-09-15 00:41:14 +05:30
2026-09-15 00:41:14 +05:30
2026-09-15 00:41:14 +05:30
2026-09-14 22:01:32 +00:00
2026-09-03 13:24:04 -07:00
2026-09-11 19:39:12 -07:00
2026-09-03 13:49:57 -07:00
2026-09-03 13:30:27 -07:00
2026-09-09 12:17:13 +05:30
2026-09-03 13:49:57 -07:00
2026-09-09 12:17:13 +05:30
2026-09-12 20:57:21 -07:00
2026-09-01 22:28:52 -07:00
refactor(tools): first-wave simplification of tools/ (file ops split, lazy_deps, code_exec, approval, browser, delegate, mcp, skills, terminal, voice, media)
2026-09-02 14:43:45 -07:00
2026-09-10 02:21:15 +05:30
2026-09-09 10:55:32 -07:00
2026-09-06 05:03:20 -07:00
2026-08-30 05:16:10 -07:00
2026-09-13 21:31:57 -07:00
2026-09-06 02:20:49 -07:00
2026-09-06 10:36:08 -07:00
2026-09-03 02:35:37 -07:00
2026-09-07 05:57:26 -07:00
2026-09-07 08:08:41 -07:00
2026-09-08 02:26:05 +05:30
2026-09-08 13:38:18 -07:00
2026-09-13 21:05:42 -07:00
2026-09-07 07:10:28 -07:00
2026-09-13 20:13:12 -07:00
2026-08-31 01:02:42 -07:00
2026-09-07 06:15:43 -07:00
2026-09-05 06:18:41 -07:00
2026-09-01 12:07:52 -07:00
2026-09-08 02:26:05 +05:30
2026-09-03 19:33:28 -07:00
2026-09-15 00:41:13 +05:30
2026-08-31 21:11:11 -05:00
2026-09-09 02:36:00 -07:00
2026-09-05 21:00:19 +05:30
2026-09-05 18:32:44 +05:30
2026-09-13 05:07:11 -07:00
2026-09-03 13:24:04 -07:00
2026-09-05 21:07:14 +05:30
2026-09-03 13:24:04 -07:00
2026-09-11 15:29:15 -07:00
2026-09-07 07:10:28 -07:00
2026-09-07 06:12:24 -07:00
2026-09-03 13:49:57 -07:00
2026-09-09 11:46:36 -07:00
2026-09-12 20:52:49 -07:00
2026-09-12 20:52:49 -07:00
2026-09-05 19:06:57 +05:30
2026-09-12 20:52:49 -07:00
2026-09-11 15:44:00 -07:00
2026-09-03 13:30:27 -07:00
2026-09-03 13:30:27 -07:00
2026-09-05 20:49:29 +05:30
2026-09-07 06:02:41 -07:00
2026-09-07 06:02:41 -07:00
2026-09-03 13:24:04 -07:00
2026-09-03 13:30:27 -07:00
2026-09-05 18:03:05 +05:30
2026-09-03 13:30:27 -07:00
2026-09-07 00:20:11 +05:30
2026-09-14 16:13:51 -07:00
2026-09-03 13:24:04 -07:00
2026-09-08 02:26:39 +05:30
2026-09-10 05:02:41 -07:00
2026-09-12 21:55:07 -07:00
2026-09-03 13:49:57 -07:00
2026-09-14 09:19:25 -07:00
2026-09-07 07:10:28 -07:00
2026-09-03 13:53:03 -07:00
2026-09-13 09:18:02 -07:00
2026-09-13 21:03:11 -07:00
2026-09-13 21:03:11 -07:00
2026-09-13 09:18:54 -07:00
2026-09-03 04:56:59 +05:30
2026-09-03 13:48:14 -07:00
2026-09-07 07:10:28 -07:00
2026-09-07 14:16:57 -07:00
2026-09-03 13:48:14 -07:00
2026-09-09 12:18:58 -07:00
2026-09-12 12:32:55 -07:00
2026-09-07 06:05:51 -07:00
2026-09-02 00:03:55 -07:00
2026-09-03 13:30:27 -07:00
2026-08-31 20:43:00 -05:00
2026-09-03 14:00:59 -07:00
2026-09-03 14:00:59 -07:00
2026-09-03 13:10:52 -07:00
2026-09-07 14:10:46 -07:00
2026-09-09 11:46:36 -07:00
2026-09-02 22:12:25 -07:00
2026-09-12 10:00:06 +05:30
2026-09-03 13:29:55 -07:00
2026-09-03 13:29:55 -07:00
2026-09-12 09:05:56 -07:00
2026-09-13 20:45:25 -07:00
2026-09-03 13:29:55 -07:00
2026-09-15 13:00:12 +05:30
2026-09-03 13:29:55 -07:00
2026-09-07 08:22:35 -07:00
2026-09-03 13:29:55 -07:00
2026-09-05 17:00:18 -07:00
2026-09-07 22:47:33 +05:30
2026-09-03 13:29:55 -07:00
2026-09-03 13:29:55 -07:00
2026-09-13 20:45:25 -07:00
2026-09-03 13:29:55 -07:00
2026-09-03 13:29:55 -07:00
2026-09-03 13:29:55 -07:00
2026-09-03 13:29:55 -07:00
2026-09-03 13:29:55 -07:00
2026-09-07 07:04:52 -07:00
2026-09-03 13:29:55 -07:00
2026-09-13 15:41:01 -07:00
2026-09-03 13:29:55 -07:00
2026-09-13 20:43:33 -07:00
2026-09-15 10:50:13 +05:30
2026-09-02 14:45:42 -07:00
2026-09-13 06:29:12 -07:00
2026-09-15 10:50:13 +05:30
2026-09-13 06:29:12 -07:00
2026-09-03 13:29:55 -07:00
2026-09-03 13:29:55 -07:00
2026-09-03 13:29:55 -07:00
2026-09-03 13:29:55 -07:00
2026-09-03 13:29:55 -07:00
2026-09-13 06:29:12 -07:00
2026-09-03 13:29:55 -07:00
2026-09-03 13:29:55 -07:00
2026-09-03 13:29:55 -07:00
2026-09-03 13:29:55 -07:00
2026-09-03 13:29:55 -07:00
2026-09-12 21:05:29 -07:00
2026-09-03 13:29:55 -07:00
2026-09-02 14:44:15 -07:00
2026-09-03 13:29:55 -07:00
2026-09-09 11:27:29 -07:00
2026-09-03 13:29:55 -07:00
2026-09-03 13:29:55 -07:00
2026-09-03 13:29:55 -07:00
2026-09-03 13:29:55 -07:00
2026-09-03 13:29:55 -07:00
2026-09-12 08:23:28 -07:00
2026-09-13 20:44:29 -07:00
2026-09-03 13:29:55 -07:00
2026-09-03 13:29:55 -07:00
2026-09-03 13:30:27 -07:00
2026-09-14 16:16:08 -07:00
2026-09-05 19:01:22 +05:30
2026-09-07 14:10:46 -07:00
2026-09-13 09:18:02 -07:00
2026-09-12 01:35:05 -07:00
2026-09-11 15:26:46 -07:00
2026-09-11 15:44:00 -07:00
2026-09-11 19:39:12 -07:00
2026-09-03 13:24:04 -07:00
2026-09-14 20:44:56 -07:00
2026-09-13 20:46:22 -07:00
2026-09-03 13:30:27 -07:00
2026-09-12 21:13:40 -07:00
2026-09-12 22:03:19 -07:00
2026-09-13 09:18:02 -07:00
2026-09-13 14:43:04 -07:00
2026-09-14 16:12:07 -07:00
2026-09-13 09:18:02 -07:00
2026-09-03 13:22:48 -07:00
2026-09-13 09:18:02 -07:00
2026-09-12 22:06:03 -07:00
2026-09-01 02:32:53 -07:00
2026-09-13 21:04:45 -07:00
2026-09-07 12:50:29 -07:00
2026-09-12 21:25:00 -07:00
2026-09-12 22:09:19 -07:00
2026-09-02 14:43:45 -07:00
2026-09-03 13:30:27 -07:00
2026-09-11 19:50:46 -07:00
2026-09-15 00:41:13 +05:30
2026-09-01 10:56:49 -07:00
2026-09-13 19:58:33 -07:00
2026-09-03 13:10:52 -07:00
2026-09-07 06:12:24 -07:00
2026-09-07 08:14:51 -07:00
2026-09-03 13:29:55 -07:00
2026-09-03 13:10:52 -07:00
2026-09-03 13:10:52 -07:00
2026-09-03 13:10:52 -07:00
2026-09-03 04:56:59 +05:30
2026-09-03 03:18:44 +05:30
2026-09-07 14:10:46 -07:00
2026-09-07 00:28:46 +05:30
2026-09-07 00:28:46 +05:30
2026-09-10 18:17:22 -07:00
2026-09-03 13:38:36 -07:00
2026-09-08 17:51:35 +10:00
2026-09-03 13:30:27 -07:00
2026-09-11 11:54:49 -07:00
2026-09-11 11:54:49 -07:00
2026-09-03 13:30:27 -07:00
2026-09-11 06:24:11 -07:00
2026-09-03 13:49:57 -07:00
2026-09-03 13:24:04 -07:00
2026-09-03 13:22:48 -07:00
2026-09-01 07:32:45 -07:00
2026-09-11 15:29:15 -07:00
2026-09-03 13:27:01 -07:00
2026-09-04 08:15:22 -07:00
2026-09-11 11:54:49 -07:00
2026-09-03 13:27:01 -07:00
2026-09-09 12:19:13 +05:30
2026-09-11 11:54:49 -07:00
2026-09-11 11:54:49 -07:00
2026-09-14 14:41:50 -07:00
2026-09-14 21:55:24 -07:00
2026-09-03 13:22:48 -07:00
2026-09-12 21:50:30 -07:00
2026-09-12 07:54:04 -07:00
2026-09-03 13:27:01 -07:00
2026-09-06 07:17:03 -07:00
2026-09-11 11:54:49 -07:00
2026-09-03 13:27:01 -07:00
2026-09-11 11:54:49 -07:00
2026-09-03 13:49:57 -07:00
2026-09-03 13:49:57 -07:00
2026-09-03 13:24:04 -07:00
2026-09-03 13:24:04 -07:00
2026-09-02 13:30:10 -07:00
2026-09-06 13:32:51 +05:30
2026-09-13 11:22:08 -07:00
2026-09-03 13:17:25 -07:00
2026-09-03 13:17:25 -07:00
2026-09-03 13:17:25 -07:00
2026-09-07 12:50:29 -07:00
2026-09-14 06:12:19 -07:00
2026-09-15 02:22:22 -05:00
2026-09-13 09:18:02 -07:00
2026-09-03 22:00:01 -07:00
2026-09-11 11:54:49 -07:00
2026-08-31 10:42:39 -07:00
2026-09-03 13:24:04 -07:00
2026-09-05 21:00:19 +05:30
2026-09-11 15:29:15 -07:00
2026-09-12 20:55:04 -07:00
2026-09-03 13:24:04 -07:00
2026-09-03 13:24:04 -07:00
2026-09-05 06:30:33 -07:00
2026-09-03 13:24:04 -07:00
2026-09-03 13:24:04 -07:00
2026-09-03 13:24:04 -07:00
2026-09-03 14:42:20 -07:00
2026-09-03 13:24:04 -07:00
2026-09-11 15:29:15 -07:00
2026-09-03 13:24:04 -07:00
2026-09-05 13:51:06 -07:00
2026-09-14 16:13:51 -07:00
2026-09-11 11:19:53 +05:30
2026-09-11 15:44:00 -07:00
2026-09-05 13:51:06 -07:00
2026-09-03 13:24:04 -07:00
2026-09-14 16:16:08 -07:00
2026-09-13 09:18:02 -07:00
2026-09-01 21:49:14 -07:00
2026-09-02 23:19:42 -07:00
2026-09-13 05:09:43 -07:00
2026-09-11 19:39:12 -07:00
2026-09-10 02:21:16 +05:30
2026-09-13 21:04:08 -07:00
2026-09-13 09:18:02 -07:00
2026-09-13 09:18:02 -07:00
2026-09-01 21:50:19 -07:00
2026-09-03 13:17:25 -07:00
2026-09-13 05:07:50 -07:00
2026-09-03 13:17:25 -07:00
2026-09-03 13:17:25 -07:00
2026-09-03 13:17:25 -07:00
2026-09-07 08:09:20 -07:00
2026-09-05 18:46:16 +05:30
2026-09-03 13:20:22 -07:00
2026-09-03 13:20:22 -07:00
2026-09-13 05:07:50 -07:00
2026-09-03 13:20:22 -07:00
2026-09-03 13:20:22 -07:00
2026-09-03 13:20:22 -07:00
2026-09-03 13:20:22 -07:00
2026-09-03 13:20:22 -07:00
2026-09-13 05:07:50 -07:00
2026-09-03 13:20:22 -07:00
2026-09-13 05:07:50 -07:00
2026-09-03 00:51:58 -07:00
2026-09-03 13:20:22 -07:00
2026-09-03 13:20:22 -07:00
2026-09-02 06:48:31 -07:00
2026-09-02 14:45:15 -07:00
2026-09-03 13:20:22 -07:00
2026-09-03 13:20:22 -07:00
2026-09-13 05:07:50 -07:00
2026-09-13 05:07:50 -07:00
2026-09-02 14:45:15 -07:00
2026-09-03 13:20:22 -07:00
2026-09-13 05:07:50 -07:00
2026-09-13 05:07:50 -07:00
2026-09-12 13:44:52 -07:00
2026-09-13 21:40:26 -07:00
2026-09-03 00:57:40 -07:00
2026-09-13 12:35:36 -07:00
2026-09-03 13:30:31 -07:00
2026-09-13 09:18:02 -07:00
2026-09-13 14:39:29 -07:00
2026-09-03 13:30:31 -07:00
2026-09-03 13:30:31 -07:00
2026-09-03 13:24:36 -07:00
2026-09-03 13:30:27 -07:00
2026-09-03 13:08:53 -07:00
2026-09-12 21:30:38 -07:00
2026-09-01 10:56:49 -07:00
2026-09-03 13:08:53 -07:00
2026-08-31 00:56:41 -07:00
2026-08-31 00:56:41 -07:00
2026-08-31 00:56:41 -07:00
2026-08-31 00:56:41 -07:00
2026-09-03 14:18:25 -07:00
2026-09-03 13:08:53 -07:00
2026-09-03 13:04:17 -07:00
2026-09-14 13:04:39 -07:00
2026-09-03 13:08:53 -07:00
2026-09-03 13:08:53 -07:00
2026-09-03 13:22:48 -07:00
2026-09-02 14:44:15 -07:00
2026-09-03 17:28:02 -07:00
2026-09-03 13:10:52 -07:00
2026-09-05 02:01:04 -07:00
2026-09-13 05:07:50 -07:00
2026-09-13 05:07:50 -07:00
2026-09-03 13:49:57 -07:00
2026-09-07 04:38:59 -07:00