@kadoa/mcp 0.2.2 → 0.2.3

package/dist/index.js

@@ -53217,13 +53217,12 @@ class KadoaOAuthProvider {
       params,
       supabaseCodeVerifier: verifier
     });
-    const redirectTo = `${serverUrl}/auth/callback`;
+    const redirectTo = `${serverUrl}/auth/callback?mcp_state=${state}`;
     const authUrl = new URL(`${supabaseUrl}/auth/v1/authorize`);
     authUrl.searchParams.set("provider", "google");
     authUrl.searchParams.set("redirect_to", redirectTo);
     authUrl.searchParams.set("code_challenge", challenge);
     authUrl.searchParams.set("code_challenge_method", "S256");
-    authUrl.searchParams.set("state", state);
     res.redirect(authUrl.toString());
   }
   async challengeForAuthorizationCode(_client, authorizationCode) {
@@ -53313,9 +53312,9 @@ class KadoaOAuthProvider {
     };
   }
   async handleAuthCallback(req, res) {
-    const { code, state } = req.query;
+    const { code, mcp_state: state } = req.query;
     if (!code || !state) {
-      res.status(400).send("Missing code or state parameter");
+      res.status(400).send("Missing code or mcp_state parameter");
       return;
     }
     const pending = pendingAuths.get(state);
@@ -53389,6 +53388,7 @@ function resolveApiKey3(req) {
 async function startHttpServer() {
   const port = parseInt(process.env.PORT || "3000", 10);
   const app = createMcpExpressApp({ host: "0.0.0.0" });
+  app.set("trust proxy", 1);
   const sessions = {};
   const provider = new KadoaOAuthProvider;
   const serverUrl = process.env.MCP_SERVER_URL || `http://localhost:${port}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kadoa/mcp",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "description": "Kadoa MCP Server — manage workflows from Claude Desktop, Cursor, and other MCP clients",
   "type": "module",
   "main": "dist/index.js",