Jakob WennbergandClaude Opus 4.6 d61670231f fix: plain 401 for MCP OAuth discovery (#74) ...

* fix: return plain 401 for MCP OAuth discovery and harden auth flow

- Return plain HTTP 401 with WWW-Authenticate header (no JSON-RPC body)
  so Claude Desktop's MCP client can trigger OAuth discovery correctly
- Remove unused apiKey import from authorize route
- Remove stale codeChallengeMethod parameter from oauth-codes

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: add Retry-After header to 429 rate limit response

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-21 14:47:47 +01:00

..

account/delete

feat: BAS data overhaul, currency revaluation, expenses, UI polish, and cleanup

2026-03-04 14:19:56 +01:00

admin/seed-template-embeddings

refactor: consolidate extension system to general-only with manifest-driven architecture

2026-02-26 14:32:56 +01:00

ai-consent

feat: UI polish, lint fixes, onboarding redesign, help page expansion, and test improvements

2026-03-05 23:05:49 +01:00

audit-trail

feat: UI polish, lint fixes, onboarding redesign, help page expansion, and test improvements

2026-03-05 23:05:49 +01:00

bookkeeping

Date filter feature (#24)

2026-03-13 17:05:32 +01:00

calendar/feed

Refactor to generic ERP base

2026-02-13 15:39:13 +01:00

customers

Fixed extensions bugs

2026-02-24 16:06:36 +01:00

deadlines

feat: UI polish, lint fixes, onboarding redesign, help page expansion, and test improvements

2026-03-05 23:05:49 +01:00

documents

fix: downgrade missing extension env vars to warning, add error boundaries and cron auth fixes

2026-03-02 15:09:23 +01:00

extensions

refactor: remove extension toggle system — compiled-in extensions are always active (#59)

2026-03-20 09:31:29 +01:00

health

feat: production readiness — 3-extension deploy with security hardening and observability

2026-03-02 11:32:43 +01:00

import

fix: resolve SIE import 504 timeout and clean up migration preview (#33)

2026-03-16 21:42:07 +01:00

invoices

Delete invoice feature (#64)

2026-03-20 14:42:43 +01:00

log

Logging (#30)

2026-03-16 11:31:58 +01:00

mcp-oauth

fix: plain 401 for MCP OAuth discovery (#74)

2026-03-21 14:47:47 +01:00

reconciliation/bank

feat: wire Zod validation into API routes, improve types and components

2026-02-23 16:00:38 +01:00

reports

feat: MCP server, API keys, OAuth, and KPI dashboard (#72)

2026-03-21 12:57:14 +01:00

sandbox

Sandbox (#8)

2026-03-11 14:54:53 +01:00

settings

feat: MCP server, API keys, OAuth, and KPI dashboard (#72)

2026-03-21 12:57:14 +01:00

supplier-invoices

feat: BFL-compliant journal descriptions and cancelled entry status (#55)

2026-03-18 17:53:54 +01:00

suppliers

feat: wire Zod validation into API routes, improve types and components

2026-02-23 16:00:38 +01:00

tax-deadlines

fix: downgrade missing extension env vars to warning, add error boundaries and cron auth fixes

2026-03-02 15:09:23 +01:00

transactions

feat: BFL-compliant journal descriptions and cancelled entry status (#55)

2026-03-18 17:53:54 +01:00

vat/validate

Fixed extensions bugs

2026-02-24 16:06:36 +01:00