Skip to content

Fix stale OAuth client registrations - #177

Merged
lipluscodex merged 1 commit into
mainfrom
176-fix-stale-oauth-client-registrations
Jul 29, 2026
Merged

Fix stale OAuth client registrations#177
lipluscodex merged 1 commit into
mainfrom
176-fix-stale-oauth-client-registrations

Conversation

@lipluscodex

Copy link
Copy Markdown
Member

Closes #176
ランダムなlocalhost callback portに対してcached Dynamic Client Registrationのredirect URI互換性を検証し、不一致時はauthorization前に再登録します。
回帰テストを通常CIへ接続し、要求仕様とclient proxy READMEを同期します。

Release type: patch

ランダムなlocalhost callback portに対して、cached Dynamic Client Registrationのredirect URI集合を検証する。互換性がないcacheはauthorization前に再登録し、回帰テストとCI・仕様・利用者向け説明を同期する。
@lipluscodex lipluscodex linked an issue Jul 29, 2026 that may be closed by this pull request
@cloudflare-workers-and-pages

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
✅ Deployment successful!
View logs
github-rag-mcp 1c193ea Jul 29 2026, 03:36 AM

@lipluscodex lipluscodex left a comment

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Self-review: PASS

  • Acceptance criteria: cached registration is reused only when a non-empty client_id and registered redirect URI set cover every callback URI requested by the current OAuth flow; stale-port, partial, and malformed caches all force re-registration.
  • Preserved constraints: random callback port and PKCE S256 remain unchanged; no credential or registration values are logged.
  • Verification: proxy 5/5 tests, Worker 75/75 tests, schema drift, TypeScript, dry deploy, package dry-run, and all PR checks passed.
  • Docs/CI: English/Japanese requirements, proxy README, and the normal CI path are synchronized.
  • Scope deviations: none. The CI file was added to the issue target list before commit so the new regression suite cannot silently fall out of routine checks.
  • Next step: auto mode, patch classification; proceed to squash merge after confirming mergeable state.

@lipluscodex
lipluscodex merged commit d056c51 into main Jul 29, 2026
3 checks passed
@lipluscodex
lipluscodex deleted the 176-fix-stale-oauth-client-registrations branch July 29, 2026 03:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Fix stale OAuth client registrations for randomized callback ports

1 participant