@ai-sdk/mcp 1.0.80 → 1.0.81

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @ai-sdk/mcp
 
+## 1.0.81
+
+### Patch Changes
+
+- 5246507: fix(mcp): use the stored authorization server for OAuth callbacks when protected resource metadata rediscovery fails
+
 ## 1.0.80
 
 ### Patch Changes

package/dist/index.js

@@ -1199,9 +1199,11 @@ async function authInternal(provider, {
   resourceMetadataUrl,
   fetchFn
 }) {
-  var _a3, _b3;
+  var _a3, _b3, _c;
   let resourceMetadata;
   let authorizationServerUrl;
+  let clientInformation;
+  let callbackAuthorizationServerInformation;
   assertResourceMetadataUrlSameOrigin(serverUrl, resourceMetadataUrl);
   try {
     resourceMetadata = await discoverOAuthProtectedResourceMetadata(
@@ -1214,15 +1216,24 @@ async function authInternal(provider, {
     }
   } catch (e) {
   }
+  if (authorizationCode !== void 0) {
+    clientInformation = await Promise.resolve(provider.clientInformation());
+    if (clientInformation) {
+      callbackAuthorizationServerInformation = await getStoredAuthorizationServerInformation({
+        provider,
+        clientInformation
+      });
+    }
+  }
   if (!authorizationServerUrl) {
-    authorizationServerUrl = serverUrl;
+    authorizationServerUrl = (_a3 = callbackAuthorizationServerInformation == null ? void 0 : callbackAuthorizationServerInformation.authorizationServerUrl) != null ? _a3 : serverUrl;
   }
   const resource = await selectResourceURL(
     serverUrl,
     provider,
     resourceMetadata
   );
-  await ((_a3 = provider.validateAuthorizationServerURL) == null ? void 0 : _a3.call(
+  await ((_b3 = provider.validateAuthorizationServerURL) == null ? void 0 : _b3.call(
     provider,
     serverUrl,
     authorizationServerUrl
@@ -1240,7 +1251,9 @@ async function authInternal(provider, {
     resourceMetadata,
     clientMetadata
   });
-  let clientInformation = await Promise.resolve(provider.clientInformation());
+  if (authorizationCode === void 0) {
+    clientInformation = await Promise.resolve(provider.clientInformation());
+  }
   if (!clientInformation) {
     if (authorizationCode !== void 0) {
       throw new Error(
@@ -1275,7 +1288,7 @@ async function authInternal(provider, {
         );
       }
     }
-    const storedAuthorizationServerInformation = await getStoredAuthorizationServerInformation({
+    const storedAuthorizationServerInformation = callbackAuthorizationServerInformation != null ? callbackAuthorizationServerInformation : await getStoredAuthorizationServerInformation({
       provider,
       clientInformation
     });
@@ -1320,7 +1333,7 @@ async function authInternal(provider, {
         currentAuthorizationServerInformation
       });
     } else {
-      await ((_b3 = provider.invalidateCredentials) == null ? void 0 : _b3.call(provider, "tokens"));
+      await ((_c = provider.invalidateCredentials) == null ? void 0 : _c.call(provider, "tokens"));
     }
     try {
       if (storedAuthorizationServerInformation) {