@mcp-use/client 2.1.3 → 2.1.4-canary.0

package/dist/index.js

@@ -1525,7 +1525,7 @@ init_connector_telemetry();
 init_logging();
 
 // src/utils/version.ts
-var VERSION = "2.1.3";
+var VERSION = "2.1.4-canary.0";
 function getPackageVersion() {
   return VERSION;
 }

package/dist/react/index.js

@@ -1900,7 +1900,7 @@ var HttpConnector = class extends BaseConnector {
 };
 
 // src/utils/version.ts
-var VERSION = "2.1.3";
+var VERSION = "2.1.4-canary.0";
 function getPackageVersion() {
   return VERSION;
 }
@@ -1971,6 +1971,11 @@ function resolveClientOptions(clientOptions) {
   };
 }
 
+// src/auth/browser.ts
+import {
+  extractWWWAuthenticateParams
+} from "@modelcontextprotocol/client";
+
 // src/auth/storage.ts
 var AUTH_CRYPTO_DATABASE = "mcp-use-oauth-crypto";
 var AUTH_CRYPTO_STORE = "keys";
@@ -2510,6 +2515,8 @@ var BrowserOAuthClientProvider = class {
   proxyOAuthRequests;
   lastAttemptedAuthUrl = null;
   authorizationPending = false;
+  /** Latest protected-resource metadata URL advertised by an MCP 401. */
+  challengedResourceMetadataUrl;
   /** Callback invoked immediately before an authorization popup opens. */
   onPopupWindow;
   constructor(serverUrl, options = {}) {
@@ -2617,6 +2624,11 @@ var BrowserOAuthClientProvider = class {
       return url;
     }
   }
+  rememberResourceMetadataChallenge(response) {
+    if (response.status !== 401) return;
+    const { resourceMetadataUrl } = extractWWWAuthenticateParams(response);
+    this.challengedResourceMetadataUrl = resourceMetadataUrl?.toString();
+  }
   /**
    * Returns a `fetch` function, scoped to this provider, that routes OAuth
    * metadata and non-browser OAuth endpoint requests through the configured
@@ -2655,10 +2667,12 @@ var BrowserOAuthClientProvider = class {
       }
       const isMetadata = pathname.includes("/.well-known/");
       if (!oauthProxyUrl) {
-        return await base(
+        const response2 = await base(
           isMetadata ? url : input,
           isMetadata ? { ...init, cache: "no-store" } : init
         );
+        if (!isMetadata) this.rememberResourceMetadataChallenge(response2);
+        return response2;
       }
       if (!restoredDiscovery) {
         restoredDiscovery = true;
@@ -2678,7 +2692,9 @@ var BrowserOAuthClientProvider = class {
         pathname
       );
       if (!isMetadata && !isProxiedEndpoint) {
-        return await base(input, init);
+        const response2 = await base(input, init);
+        this.rememberResourceMetadataChallenge(response2);
+        return response2;
       }
       try {
         const urlObj = new URL(url);
@@ -2815,8 +2831,15 @@ var BrowserOAuthClientProvider = class {
     return this.session.saveDiscoveryState(state);
   }
   /** Return previously saved OAuth discovery state, or `undefined`. */
-  discoveryState() {
-    return this.session.discoveryState();
+  async discoveryState() {
+    const state = await this.session.discoveryState();
+    const challengedUrl = this.challengedResourceMetadataUrl;
+    this.challengedResourceMetadataUrl = void 0;
+    if (challengedUrl && state && (state.resourceMetadataUrl !== challengedUrl || !state.resourceMetadata)) {
+      await this.session.invalidateCredentials("discovery");
+      return void 0;
+    }
+    return state;
   }
   /**
    * Return the token endpoint from the SDK's persisted discovery state.