Skip to content

Toolcraft hosted OAuth login form needs submit progress feedback #525

Description

@kamilio

Problem

The built-in Toolcraft hosted OAuth login form gives no visible feedback after a valid submit. Provider authentication can take up to the configured request timeout, while the Connect button remains enabled and unchanged. Users reasonably conclude that clicking it did nothing and may submit repeatedly.

Reproduction

  1. Configure createHTTPMCPServer(..., { oauth: hostedOAuth(...) }) with the built-in provider login form.
  2. Make provider.connect() take several seconds.
  3. Submit valid fields.
  4. Observe no pending state while the native POST is in flight.

Expected

  • Immediate accessible pending feedback.
  • Disable duplicate submits while the request is in flight.
  • Preserve the native form POST and cross-origin OAuth callback behavior.
  • Keep the strict CSP; use a per-response nonce rather than unsafe-inline.
  • Restore the button on BFCache navigation.
  • Regression coverage for initial and retry pages.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions