Jakob Wennberg d61670231f fix: plain 401 for MCP OAuth discovery (#74) ...

* fix: return plain 401 for MCP OAuth discovery and harden auth flow

- Return plain HTTP 401 with WWW-Authenticate header (no JSON-RPC body)
  so Claude Desktop's MCP client can trigger OAuth discovery correctly
- Remove unused apiKey import from authorize route
- Remove stale codeChallengeMethod parameter from oauth-codes

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: add Retry-After header to 429 rate limit response

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-21 14:47:47 +01:00

..

api-keys.ts

feat: MCP server, API keys, OAuth, and KPI dashboard (#72)

2026-03-21 12:57:14 +01:00

mfa.ts

feat: upgrade auth to email+password with optional TOTP MFA

2026-03-08 10:17:49 +01:00

oauth-codes.ts

fix: plain 401 for MCP OAuth discovery (#74)

2026-03-21 14:47:47 +01:00

require-auth.ts

feat: upgrade auth to email+password with optional TOTP MFA

2026-03-08 10:17:49 +01:00