Skip to content

Per-server oauth flow #20

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 14 commits into
base: main
Choose a base branch
from
Draft

Per-server oauth flow #20

wants to merge 14 commits into from

Conversation

dgellow
Copy link
Owner

@dgellow dgellow commented Jul 2, 2025

No description provided.

@dgellow dgellow force-pushed the sam/mcp-server-behind-oauth branch from 604c9f0 to 0b3fbc1 Compare July 2, 2025 21:46
dgellow added 12 commits July 3, 2025 11:52
Support both manual tokens and OAuth flows. Add Secret type for sensitive fields.
Move OAuth code into separate packages based on responsibility: auth package for inbound authentication from Claude, services package for outbound authentication to external services. Separate HTTP handlers from business logic for cleaner architecture.
After Google OAuth, automatically redirect to server OAuth if the return URL specifies a server that requires it. Also inject user tokens into stdio sessions during creation so they can authenticate with backend services.
Update token management page to show OAuth connect buttons for services that support OAuth authentication. Distinguish between OAuth and manual token services, showing appropriate UI elements for each type.
@dgellow dgellow force-pushed the sam/mcp-server-behind-oauth branch from 8fedb27 to 427064d Compare July 3, 2025 09:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant