@modelcontextprotocol/inspector-client 1.0.2 → 1.0.3

package/bin/start.js

@@ -9,6 +9,15 @@ import { randomBytes } from "crypto";
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const DEFAULT_MCP_PROXY_LISTEN_PORT = "6277";
 
+// Only an explicit truthy value disables auth; unset, empty, "false", "0" and
+// anything unrecognized leave it enabled. Identical to isAuthDisabledFlag in
+// server/src/request-guards.ts (whose parser lives in server/src/env-flags.ts)
+// so the launcher and the proxy always agree; keep the two in sync.
+function isAuthDisabledFlag(value) {
+  if (value === undefined) return false;
+  return ["true", "1", "yes"].includes(value.trim().toLowerCase());
+}
+
 function delay(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms, true));
 }
@@ -292,7 +301,7 @@ async function main() {
   // Use provided token from environment or generate a new one
   const sessionToken =
     process.env.MCP_PROXY_AUTH_TOKEN || randomBytes(32).toString("hex");
-  const authDisabled = !!process.env.DANGEROUSLY_OMIT_AUTH;
+  const authDisabled = isAuthDisabledFlag(process.env.DANGEROUSLY_OMIT_AUTH);
 
   const abort = new AbortController();
 

package/dist/assets/{OAuthCallback-at8T3Iwi.js → OAuthCallback-jbB02Bt3.js}

@@ -1,4 +1,4 @@
-import { u as useToast, r as reactExports, j as jsxRuntimeExports, p as parseOAuthCallbackParams, g as generateOAuthErrorDescription, S as SESSION_KEYS, I as InspectorOAuthClientProvider, a as auth } from "./index-DdyO6kfY.js";
+import { u as useToast, r as reactExports, c as clearOAuthConnectionSnapshot, j as jsxRuntimeExports, p as parseOAuthCallbackParams, g as generateOAuthErrorDescription, S as SESSION_KEYS, I as InspectorOAuthClientProvider, a as auth } from "./index-C2CDzlVy.js";
 const OAuthCallback = ({ onConnect }) => {
   const { toast } = useToast();
   const hasProcessedRef = reactExports.useRef(false);
@@ -42,9 +42,13 @@ const OAuthCallback = ({ onConnect }) => {
         description: "Successfully authenticated with OAuth",
         variant: "default"
       });
-      onConnect(serverUrl);
+      const refusal = onConnect(serverUrl);
+      if (refusal) {
+        notifyError(refusal);
+      }
     };
     handleCallback().finally(() => {
+      clearOAuthConnectionSnapshot();
       window.history.replaceState({}, document.title, "/");
     });
   }, [toast, onConnect]);

package/dist/assets/{OAuthDebugCallback-ZJ9hxfpr.js → OAuthDebugCallback-VeJ8bP3s.js}

@@ -1,4 +1,4 @@
-import { r as reactExports, S as SESSION_KEYS, p as parseOAuthCallbackParams, j as jsxRuntimeExports, g as generateOAuthErrorDescription } from "./index-DdyO6kfY.js";
+import { r as reactExports, S as SESSION_KEYS, p as parseOAuthCallbackParams, j as jsxRuntimeExports, g as generateOAuthErrorDescription } from "./index-C2CDzlVy.js";
 const OAuthDebugCallback = ({ onConnect }) => {
   reactExports.useEffect(() => {
     let isProcessed = false;