@ai-sdk/mcp 2.0.50 → 2.0.52

package/CHANGELOG.md

@@ -1,5 +1,31 @@
 # @ai-sdk/mcp
 
+## 2.0.52
+
+### Patch Changes
+
+- Updated dependencies [215b25e]
+- Updated dependencies [d4d96bf]
+- Updated dependencies [a7dd893]
+- Updated dependencies [3456e2c]
+- Updated dependencies [c4e76de]
+  - @ai-sdk/provider-utils@5.0.43
+  - @ai-sdk/provider@4.0.17
+
+## 2.0.51
+
+### Patch Changes
+
+- df91a09: fix(mcp): use the stored authorization server for OAuth callbacks when protected resource metadata rediscovery fails
+- 2cd80b3: Keep default Node.js downloads protected by DNS validation and connection pinning when frameworks or instrumentation wrap global fetch before or after the SDK loads.
+- Updated dependencies [91c2128]
+- Updated dependencies [2cd80b3]
+- Updated dependencies [d06bb2a]
+- Updated dependencies [123d71f]
+- Updated dependencies [2fa5e0e]
+  - @ai-sdk/provider-utils@5.0.42
+  - @ai-sdk/provider@4.0.16
+
 ## 2.0.50
 
 ### Patch Changes

package/dist/index.js

@@ -1302,9 +1302,11 @@ async function authInternal(provider, {
   resourceMetadataUrl,
   fetchFn
 }) {
-  var _a3, _b3, _c, _d;
+  var _a3, _b3, _c, _d, _e;
   let resourceMetadata;
   let authorizationServerUrl;
+  let clientInformation;
+  let callbackAuthorizationServerInformation;
   assertResourceMetadataUrlSameOrigin(serverUrl, resourceMetadataUrl);
   try {
     resourceMetadata = await discoverOAuthProtectedResourceMetadata(
@@ -1317,8 +1319,17 @@ async function authInternal(provider, {
     }
   } catch (e) {
   }
+  if (authorizationCode !== void 0) {
+    clientInformation = await Promise.resolve(provider.clientInformation());
+    if (clientInformation) {
+      callbackAuthorizationServerInformation = await getStoredAuthorizationServerInformation({
+        provider,
+        clientInformation
+      });
+    }
+  }
   if (!authorizationServerUrl) {
-    authorizationServerUrl = serverUrl;
+    authorizationServerUrl = (_a3 = callbackAuthorizationServerInformation == null ? void 0 : callbackAuthorizationServerInformation.authorizationServerUrl) != null ? _a3 : serverUrl;
   }
   const parsedServerUrl = new URL(serverUrl);
   const parsedAuthorizationServerUrl = new URL(authorizationServerUrl);
@@ -1333,7 +1344,7 @@ async function authInternal(provider, {
     provider,
     resourceMetadata
   );
-  await ((_a3 = provider.validateAuthorizationServerURL) == null ? void 0 : _a3.call(
+  await ((_b3 = provider.validateAuthorizationServerURL) == null ? void 0 : _b3.call(
     provider,
     serverUrl,
     authorizationServerUrl
@@ -1352,9 +1363,11 @@ async function authInternal(provider, {
     resourceMetadata,
     clientMetadata
   });
-  let clientInformation = await Promise.resolve(provider.clientInformation());
+  if (authorizationCode === void 0) {
+    clientInformation = await Promise.resolve(provider.clientInformation());
+  }
   if ((clientInformation == null ? void 0 : clientInformation.issuer) != null) {
-    const storedAuthorizationServerInformation = await getStoredAuthorizationServerInformation({
+    const storedAuthorizationServerInformation = callbackAuthorizationServerInformation != null ? callbackAuthorizationServerInformation : await getStoredAuthorizationServerInformation({
       provider,
       clientInformation
     });
@@ -1399,7 +1412,7 @@ async function authInternal(provider, {
         );
       }
     }
-    const storedAuthorizationServerInformation = await getStoredAuthorizationServerInformation({
+    const storedAuthorizationServerInformation = callbackAuthorizationServerInformation != null ? callbackAuthorizationServerInformation : await getStoredAuthorizationServerInformation({
       provider,
       clientInformation
     });
@@ -1410,7 +1423,7 @@ async function authInternal(provider, {
     }
     validateAuthorizationResponseIssuer({
       callbackIssuer,
-      expectedIssuer: (_c = (_b3 = storedAuthorizationServerInformation.issuer) != null ? _b3 : metadata == null ? void 0 : metadata.issuer) != null ? _c : String(authorizationServerUrl)
+      expectedIssuer: (_d = (_c = storedAuthorizationServerInformation.issuer) != null ? _c : metadata == null ? void 0 : metadata.issuer) != null ? _d : String(authorizationServerUrl)
     });
     assertAuthorizationServerInformationMatches({
       storedAuthorizationServerInformation,
@@ -1448,7 +1461,7 @@ async function authInternal(provider, {
         currentAuthorizationServerInformation
       });
     } else {
-      await ((_d = provider.invalidateCredentials) == null ? void 0 : _d.call(provider, "tokens"));
+      await ((_e = provider.invalidateCredentials) == null ? void 0 : _e.call(provider, "tokens"));
     }
     try {
       if (storedAuthorizationServerInformation) {