@zereight/mcp-gitlab 2.3.6 → 2.3.7-next.136

package/README.ko.md

@@ -314,6 +314,7 @@ MCP 서버가 직접 로컬 브라우저 callback을 받을 때만 `GITLAB_OAUTH
 | `GITLAB_OAUTH_ALLOWED_REDIRECT_URIS` | 선택 | 콜백 프록시 모드가 리다이렉트할 클라이언트 callback URL 목록 (기본값: Claude, ChatGPT, Cursor, 루프백 callback. 추가하려면 `defaults,<url>`) |
 | `GITLAB_OAUTH_SCOPES`         | 선택 | 쉼표로 구분된 scope 목록(기본값: `api,read_api,read_user`)                                                                      |
 | `GITLAB_OAUTH_ALLOWED_GROUPS` | 선택 | 쉼표로 구분된 GitLab 그룹 전체 경로 — 해당 그룹 및 하위 그룹 멤버만 서버를 사용할 수 있음 (기존 `GITLAB_ALLOWED_GROUPS` 대체) |
+| `OAUTH_DISABLE_REFRESH_TOKEN` | 선택 | `true`면 refresh token을 발급하지 않음: 세션 TTL과 무관하게 GitLab access token이 만료될 때마다(2시간) 브라우저에서 다시 인가 |
 
 `STREAMABLE_HTTP=true`일 때 서버 측 GitLab 자격 증명(`GITLAB_PERSONAL_ACCESS_TOKEN`, `GITLAB_JOB_TOKEN`, `GITLAB_AUTH_COOKIE_PATH`, 또는 `GITLAB_USE_OAUTH`)은 `REMOTE_AUTHORIZATION=true`, `GITLAB_MCP_OAUTH=true`, 또는 `STREAMABLE_HTTP_AUTH_TOKEN`이 필요합니다.
 
@@ -418,6 +419,7 @@ Authorization: Bearer glpat-xxxxxxxxxxxxxxxxxxxx
 - `GITLAB_OAUTH_CALLBACK_PROXY`
 - `GITLAB_OAUTH_ALLOWED_REDIRECT_URIS`
 - `OAUTH_REGISTER_RATE_LIMIT_PER_HOUR`
+- `OAUTH_DISABLE_REFRESH_TOKEN`
 - `OAUTH_STATELESS_MODE`
 - `OAUTH_STATELESS_SECRET`
 
@@ -578,6 +580,7 @@ node build/index.js
 | `STREAMABLE_HTTP`                           | 예     | 반드시 `true`(SSE 미지원)                                                                                                                                                  |
 | `GITLAB_OAUTH_SCOPES`                       | 아니오 | 요청할 GitLab scope 목록(쉼표 구분). 기본값은 `api`이며, 유효 permission mode가 `readonly`일 때 `read_api`입니다. 사전 등록 애플리케이션에 해당 scope가 설정되어 있어야 합니다. |
 | `OAUTH_REGISTER_RATE_LIMIT_PER_HOUR`        | 아니오 | Dynamic Client Registration(`POST /register`)의 클라이언트 IP당 rolling 한도. 기본 `20`/시간, 범위 `1`–`1000`. IDE 창 여러 개 등으로 등록이 막히면 올리세요. GitLab API 한도와 무관합니다. |
+| `OAUTH_DISABLE_REFRESH_TOKEN`               | 아니오 | `true`면 `/token` 응답에서 `refresh_token`을 빼고 refresh grant를 `invalid_grant`로 거부합니다. GitLab access token이 만료되면 브라우저에서 다시 인가해야 합니다. 기본 `false`. 콜백 프록시 모드에서는 이 서버의 흐름을 따르는 MCP 클라이언트가 GitLab refresh token을 받지 못합니다(passthrough에서는 클라이언트가 GitLab에서 직접 받을 수 있음). 표준 MCP 클라이언트를 위한 재인가 정책이며 보안 경계가 아닙니다. 켜기 전에 발급된 refresh token은 GitLab **User Settings → Applications → Authorized applications → Revoke**로 revoke할 때까지 유효합니다. |
 | `MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL` | 아니오 | 로컬 HTTP 개발에서만 `true`                                                                                                                                                |
 
 **중요 사항:**

package/README.md

@@ -336,6 +336,7 @@ exchanging credentials with GitLab on behalf of the client.
 | `GITLAB_OAUTH_ALLOWED_REDIRECT_URIS` | optional | Client callback URLs that callback proxy mode will redirect to (default: Claude, ChatGPT, Cursor and loopback callbacks; `defaults,<url>` to add one) |
 | `GITLAB_OAUTH_SCOPES`         | optional | Comma-separated scopes (default: `api,read_api,read_user`)                                                                              |
 | `GITLAB_OAUTH_ALLOWED_GROUPS` | optional | Comma-separated group full paths — only members (and subgroup members) may use the server (replaces deprecated `GITLAB_ALLOWED_GROUPS`) |
+| `OAUTH_DISABLE_REFRESH_TOKEN` | optional | Set to `true` to issue no refresh tokens: users re-authorize in the browser each time the GitLab access token expires (2 h), regardless of the session TTL |
 
 When `STREAMABLE_HTTP=true`, server-side GitLab credentials (`GITLAB_PERSONAL_ACCESS_TOKEN`, `GITLAB_JOB_TOKEN`, `GITLAB_AUTH_COOKIE_PATH`, or `GITLAB_USE_OAUTH`) require `REMOTE_AUTHORIZATION=true`, `GITLAB_MCP_OAUTH=true`, or `STREAMABLE_HTTP_AUTH_TOKEN`.
 
@@ -454,6 +455,7 @@ Commonly referenced variables:
 - `GITLAB_OAUTH_CALLBACK_PROXY`
 - `GITLAB_OAUTH_ALLOWED_REDIRECT_URIS`
 - `OAUTH_REGISTER_RATE_LIMIT_PER_HOUR`
+- `OAUTH_DISABLE_REFRESH_TOKEN`
 - `OAUTH_STATELESS_MODE`
 - `OAUTH_STATELESS_SECRET`
 
@@ -620,6 +622,7 @@ No `headers` field is needed — Claude.ai obtains the token via OAuth automatic
 | `STREAMABLE_HTTP`                           | Yes      | Must be `true` (SSE is not supported)                                                                                                                                                                               |
 | `GITLAB_OAUTH_SCOPES`                       | No       | Comma-separated GitLab scopes to request (e.g. `api,read_user`). Defaults to `api` (or `read_api` when the effective permission mode is `readonly`). The pre-registered application must be configured with at least these scopes. |
 | `OAUTH_REGISTER_RATE_LIMIT_PER_HOUR`        | No       | Per-IP rolling limit for Dynamic Client Registration (`POST /register`). Default `20`/hour; range `1`–`1000`. Raise when clients (e.g. multiple IDE windows) hit registration throttling. Not a GitLab API limit. |
+| `OAUTH_DISABLE_REFRESH_TOKEN`               | No       | Set `true` to drop `refresh_token` from `/token` responses and reject the refresh grant with `invalid_grant`, so users re-authorize in the browser when the GitLab access token expires. Default `false`. In callback proxy mode, MCP clients that follow this server's flow never receive a GitLab refresh token (in passthrough the client can get one from GitLab directly). This is a re-authorization policy for standard MCP clients, not a security boundary. Refresh tokens issued before enabling stay valid until revoked in GitLab under **User Settings → Applications → Authorized applications → Revoke**. |
 | `MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL` | No       | Set `true` for local HTTP dev only                                                                                                                                                                                  |
 
 **Important Notes:**

package/README.pt-BR.md

@@ -314,6 +314,7 @@ Use `GITLAB_OAUTH_REDIRECT_URI` somente quando o próprio servidor MCP receber o
 | `GITLAB_OAUTH_ALLOWED_REDIRECT_URIS` | opcional | URLs de callback de cliente para as quais o modo de proxy de callback redireciona (padrão: callbacks do Claude, ChatGPT, Cursor e loopback; use `defaults,<url>` para adicionar) |
 | `GITLAB_OAUTH_SCOPES`         | opcional    | Scopes separados por vírgula (padrão: `api,read_api,read_user`)                                                                                                          |
 | `GITLAB_OAUTH_ALLOWED_GROUPS` | opcional    | Caminhos completos de grupos GitLab separados por vírgula — apenas membros desses grupos e subgrupos podem usar o servidor (substitui o obsoleto `GITLAB_ALLOWED_GROUPS`) |
+| `OAUTH_DISABLE_REFRESH_TOKEN` | opcional    | Defina como `true` para não emitir refresh tokens: o usuário autoriza de novo no navegador sempre que o access token do GitLab expira (2 h), independente do TTL da sessão |
 
 Quando `STREAMABLE_HTTP=true`, credenciais GitLab do lado do servidor (`GITLAB_PERSONAL_ACCESS_TOKEN`, `GITLAB_JOB_TOKEN`, `GITLAB_AUTH_COOKIE_PATH` ou `GITLAB_USE_OAUTH`) exigem `REMOTE_AUTHORIZATION=true`, `GITLAB_MCP_OAUTH=true` ou `STREAMABLE_HTTP_AUTH_TOKEN`.
 
@@ -418,6 +419,7 @@ Variáveis usadas com frequência:
 - `GITLAB_OAUTH_CALLBACK_PROXY`
 - `GITLAB_OAUTH_ALLOWED_REDIRECT_URIS`
 - `OAUTH_REGISTER_RATE_LIMIT_PER_HOUR`
+- `OAUTH_DISABLE_REFRESH_TOKEN`
 - `OAUTH_STATELESS_MODE`
 - `OAUTH_STATELESS_SECRET`
 
@@ -578,6 +580,7 @@ Não é necessário definir `headers`. O Claude.ai obtém o token via OAuth.
 | `STREAMABLE_HTTP`                           | sim         | Deve ser `true` (SSE não é suportado)                                                                                                                                                                                                            |
 | `GITLAB_OAUTH_SCOPES`                       | não         | Scopes do GitLab a solicitar, separados por vírgula. O padrão é `api`, ou `read_api` quando o permission mode efetivo é `readonly`. O aplicativo previamente registrado deve ter pelo menos esses scopes configurados.                                     |
 | `OAUTH_REGISTER_RATE_LIMIT_PER_HOUR`        | não         | Limite rolling de Dynamic Client Registration (`POST /register`) por IP do cliente. Padrão `20`/hora, intervalo `1`–`1000`. Aumente se múltiplas janelas de IDE estiverem atingindo o limite. Não está relacionado aos limites da API do GitLab. |
+| `OAUTH_DISABLE_REFRESH_TOKEN`               | não         | Defina `true` para remover `refresh_token` das respostas de `/token` e rejeitar o refresh grant com `invalid_grant`; o usuário autoriza de novo no navegador quando o access token do GitLab expira. Padrão `false`. No modo de proxy de callback, clientes MCP que seguem o fluxo deste servidor nunca recebem um refresh token do GitLab (em passthrough o cliente pode obter um direto do GitLab). É uma política de reautorização para clientes MCP padrão, não uma barreira de segurança. Refresh tokens emitidos antes de ativar continuam válidos até serem revogados no GitLab em **User Settings → Applications → Authorized applications → Revoke**. |
 | `MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL` | não         | Apenas para desenvolvimento local via HTTP                                                                                                                                                                                                       |
 
 **Observações importantes:**

package/README.zh-CN.md

@@ -313,6 +313,7 @@ OpenCode、MCPJam、Claude.ai 等远程 MCP 客户端可能会在授权时发送
 | `GITLAB_OAUTH_ALLOWED_REDIRECT_URIS` | 可选 | 回调代理模式允许重定向的客户端 callback URL 列表（默认：Claude、ChatGPT、Cursor 和环回地址 callback；用 `defaults,<url>` 追加） |
 | `GITLAB_OAUTH_SCOPES`         | 可选 | 逗号分隔的 scope（默认：`api,read_api,read_user`）                                                          |
 | `GITLAB_OAUTH_ALLOWED_GROUPS` | 可选 | 逗号分隔的 GitLab 群组完整路径 — 仅该群组及其子群组的成员可使用服务器（替代已废弃的 `GITLAB_ALLOWED_GROUPS`） |
+| `OAUTH_DISABLE_REFRESH_TOKEN` | 可选 | 设置为 `true` 时不发放 refresh token：每当 GitLab access token 过期（2 小时）用户都需在浏览器中重新授权，与会话 TTL 无关 |
 
 当 `STREAMABLE_HTTP=true` 时，服务端 GitLab 凭据（`GITLAB_PERSONAL_ACCESS_TOKEN`、`GITLAB_JOB_TOKEN`、`GITLAB_AUTH_COOKIE_PATH` 或 `GITLAB_USE_OAUTH`）需要 `REMOTE_AUTHORIZATION=true`、`GITLAB_MCP_OAUTH=true` 或 `STREAMABLE_HTTP_AUTH_TOKEN`。
 
@@ -417,6 +418,7 @@ Authorization: Bearer glpat-xxxxxxxxxxxxxxxxxxxx
 - `GITLAB_OAUTH_CALLBACK_PROXY`
 - `GITLAB_OAUTH_ALLOWED_REDIRECT_URIS`
 - `OAUTH_REGISTER_RATE_LIMIT_PER_HOUR`
+- `OAUTH_DISABLE_REFRESH_TOKEN`
 - `OAUTH_STATELESS_MODE`
 - `OAUTH_STATELESS_SECRET`
 
@@ -577,6 +579,7 @@ node build/index.js
 | `STREAMABLE_HTTP`                           | 是   | 必须为 `true`（不支持 SSE）                                                                                                              |
 | `GITLAB_OAUTH_SCOPES`                       | 否   | 要请求的 GitLab scopes，以逗号分隔。默认值为 `api`；有效 permission mode 为 `readonly` 时为 `read_api`。预注册应用必须配置至少这些 scopes。 |
 | `OAUTH_REGISTER_RATE_LIMIT_PER_HOUR`        | 否   | Dynamic Client Registration（`POST /register`）的每客户端 IP rolling 限制。默认 `20`/小时，范围 `1`–`1000`。多个 IDE 窗口等导致注册被限流时可调高。与 GitLab API 限额无关。 |
+| `OAUTH_DISABLE_REFRESH_TOKEN`               | 否   | 设置 `true` 时 `/token` 响应不含 `refresh_token`，refresh grant 以 `invalid_grant` 拒绝；GitLab access token 过期后用户需在浏览器中重新授权。默认 `false`。回调代理模式下，遵循本服务器流程的 MCP 客户端拿不到 GitLab refresh token（passthrough 模式下客户端可直接从 GitLab 获取）。这是面向标准 MCP 客户端的重新授权策略，而非安全边界。启用前已发放的 refresh token 在 GitLab **User Settings → Applications → Authorized applications → Revoke** 撤销前仍然有效。 |
 | `MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL` | 否   | 仅用于本地 HTTP 开发                                                                                                                     |
 
 **重要说明：**

package/build/cli/args.js

@@ -48,6 +48,7 @@ const GLOBAL_FLAG_NAMES = new Set([
     "oauth-allowed-redirect-uris",
     "allowed-groups",
     "oauth-allowed-groups",
+    "oauth-disable-refresh-token",
     "enable-dynamic-api-url",
     "enable-dynamic-project-scope",
     "enable-strict-project-scope",

package/build/cli-boolean-flags.js

@@ -17,6 +17,7 @@ export const BOOLEAN_CLI_FLAG_NAMES = new Set([
     "allow-unauthenticated-tool-discovery",
     "mcp-trust-proxy",
     "oauth-callback-proxy",
+    "oauth-disable-refresh-token",
     "enable-dynamic-api-url",
     "enable-dynamic-project-scope",
     "enable-strict-project-scope",

package/build/config.js

@@ -111,6 +111,12 @@ export const GITLAB_OAUTH_ALLOWED_GROUPS = (() => {
         .filter(Boolean);
     return groups.length > 0 ? groups : undefined;
 })();
+/**
+ * MCP OAuth proxy: reject the refresh_token grant (invalid_grant) and omit
+ * refresh_token from issued tokens, so clients must redo the browser
+ * authorization once the GitLab access token expires.
+ */
+export const OAUTH_DISABLE_REFRESH_TOKEN = getConfig("oauth-disable-refresh-token", "OAUTH_DISABLE_REFRESH_TOKEN") === "true";
 export const ENABLE_DYNAMIC_API_URL = getConfig("enable-dynamic-api-url", "ENABLE_DYNAMIC_API_URL") === "true";
 export const ENABLE_DYNAMIC_PROJECT_SCOPE = getConfig("enable-dynamic-project-scope", "ENABLE_DYNAMIC_PROJECT_SCOPE") === "true";
 export const ENABLE_STRICT_PROJECT_SCOPE = getConfig("enable-strict-project-scope", "ENABLE_STRICT_PROJECT_SCOPE") === "true";

package/build/index.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { cliArgs, getConfig, ENABLE_DYNAMIC_API_URL, ENABLE_DYNAMIC_PROJECT_SCOPE, ENABLE_STRICT_PROJECT_SCOPE, GITLAB_AUTH_COOKIE_PATH, GITLAB_ALLOW_UNAUTHENTICATED_TOOL_DISCOVERY, GITLAB_CA_CERT_PATH, GITLAB_JOB_TOKEN, GITLAB_MCP_OAUTH, GITLAB_MCP_REQUEST_BODY_LIMIT, GITLAB_OAUTH_APP_ID, GITLAB_OAUTH_SCOPES, GITLAB_OAUTH_CALLBACK_PROXY, GITLAB_OAUTH_ALLOWED_REDIRECT_URIS_RAW, GITLAB_PERSONAL_ACCESS_TOKEN, GITLAB_POOL_MAX_SIZE, GITLAB_DISABLE_VERSION_CHECK, GITLAB_MASKING_ENABLED, GITLAB_MASKING_CONFIG, GITLAB_MASKING_POLICY_FILE, GITLAB_MASKING_WORKSPACE_DIR, GITLAB_PERMISSION_MODE, GITLAB_TOOLSETS_RAW, GITLAB_TOOLS_RAW, HOST, HTTP_PROXY, HTTPS_PROXY, IS_OLD, MCP_SERVER_URL, NODE_TLS_REJECT_UNAUTHORIZED, NO_PROXY, OAUTH_STATELESS_CLIENT_TTL_SECONDS, OAUTH_STATELESS_MODE, OAUTH_STATELESS_PENDING_TTL_SECONDS, OAUTH_STATELESS_SESSION_TTL_SECONDS, OAUTH_STATELESS_STORED_TTL_SECONDS, PORT, REMOTE_AUTHORIZATION, SESSION_TIMEOUT_SECONDS, SSE, STREAMABLE_HTTP, MCP_TRUST_PROXY, USE_GITLAB_WIKI, USE_MILESTONE, USE_OAUTH, USE_PIPELINE, GITLAB_TOOL_POLICY_APPROVE_RAW, GITLAB_TOOL_POLICY_HIDDEN_RAW, GITLAB_OAUTH_ALLOWED_GROUPS, GITLAB_MCP_COMPACT_RESULTS, GITLAB_MCP_COMPACT_RESULT_CHARS, GITLAB_MCP_COMPACT_TOOL_NAMES, GITLAB_TOOL_PROFILE, GITLAB_DOWNLOAD_DIR, buildDeprecatedEnvInput, } from "./config.js";
+import { cliArgs, getConfig, ENABLE_DYNAMIC_API_URL, ENABLE_DYNAMIC_PROJECT_SCOPE, ENABLE_STRICT_PROJECT_SCOPE, GITLAB_AUTH_COOKIE_PATH, GITLAB_ALLOW_UNAUTHENTICATED_TOOL_DISCOVERY, GITLAB_CA_CERT_PATH, GITLAB_JOB_TOKEN, GITLAB_MCP_OAUTH, GITLAB_MCP_REQUEST_BODY_LIMIT, GITLAB_OAUTH_APP_ID, GITLAB_OAUTH_SCOPES, GITLAB_OAUTH_CALLBACK_PROXY, GITLAB_OAUTH_ALLOWED_REDIRECT_URIS_RAW, GITLAB_PERSONAL_ACCESS_TOKEN, GITLAB_POOL_MAX_SIZE, GITLAB_DISABLE_VERSION_CHECK, GITLAB_MASKING_ENABLED, GITLAB_MASKING_CONFIG, GITLAB_MASKING_POLICY_FILE, GITLAB_MASKING_WORKSPACE_DIR, GITLAB_PERMISSION_MODE, GITLAB_TOOLSETS_RAW, GITLAB_TOOLS_RAW, HOST, HTTP_PROXY, HTTPS_PROXY, IS_OLD, MCP_SERVER_URL, NODE_TLS_REJECT_UNAUTHORIZED, NO_PROXY, OAUTH_DISABLE_REFRESH_TOKEN, OAUTH_STATELESS_CLIENT_TTL_SECONDS, OAUTH_STATELESS_MODE, OAUTH_STATELESS_PENDING_TTL_SECONDS, OAUTH_STATELESS_SESSION_TTL_SECONDS, OAUTH_STATELESS_STORED_TTL_SECONDS, PORT, REMOTE_AUTHORIZATION, SESSION_TIMEOUT_SECONDS, SSE, STREAMABLE_HTTP, MCP_TRUST_PROXY, USE_GITLAB_WIKI, USE_MILESTONE, USE_OAUTH, USE_PIPELINE, GITLAB_TOOL_POLICY_APPROVE_RAW, GITLAB_TOOL_POLICY_HIDDEN_RAW, GITLAB_OAUTH_ALLOWED_GROUPS, GITLAB_MCP_COMPACT_RESULTS, GITLAB_MCP_COMPACT_RESULT_CHARS, GITLAB_MCP_COMPACT_TOOL_NAMES, GITLAB_TOOL_PROFILE, GITLAB_DOWNLOAD_DIR, buildDeprecatedEnvInput, } from "./config.js";
 import { getDeprecatedEnvWarnings } from "./deprecated-env.js";
 /** True when the server is running in remote/network mode (SSE or StreamableHTTP transport). */
 const IS_REMOTE = SSE || STREAMABLE_HTTP;
@@ -11664,7 +11664,7 @@ async function startSSEServer() {
  * Start server with Streamable HTTP transport
  */
 async function startStreamableHTTPServer() {
-    const { express, rateLimit, ipKeyGenerator, StreamableHTTPServerTransport, mcpAuthRouter, requireBearerAuth, } = await loadRemoteHttpStack();
+    const { express, rateLimit, ipKeyGenerator, StreamableHTTPServerTransport, mcpAuthRouter, createOAuthMetadata, metadataHandler, requireBearerAuth, } = await loadRemoteHttpStack();
     const app = express();
     // Session IDs are untrusted map keys. A null prototype prevents inherited
     // names such as "constructor" from masquerading as live transports.
@@ -12214,8 +12214,11 @@ async function startStreamableHTTPServer() {
                 storedTtlSeconds: OAUTH_STATELESS_STORED_TTL_SECONDS,
             }
             : null;
-        const oauthProvider = createGitLabOAuthProvider(gitlabBaseUrl, GITLAB_OAUTH_APP_ID, "GitLab MCP Server", GITLAB_PERMISSION_MODE === "readonly", GITLAB_OAUTH_SCOPES, GITLAB_OAUTH_ALLOWED_GROUPS, GITLAB_OAUTH_CALLBACK_PROXY, callbackUrl, statelessOptions, parseAllowedRedirectUris(GITLAB_OAUTH_ALLOWED_REDIRECT_URIS_RAW));
+        const oauthProvider = createGitLabOAuthProvider(gitlabBaseUrl, GITLAB_OAUTH_APP_ID, "GitLab MCP Server", GITLAB_PERMISSION_MODE === "readonly", GITLAB_OAUTH_SCOPES, GITLAB_OAUTH_ALLOWED_GROUPS, GITLAB_OAUTH_CALLBACK_PROXY, callbackUrl, statelessOptions, parseAllowedRedirectUris(GITLAB_OAUTH_ALLOWED_REDIRECT_URIS_RAW), OAUTH_DISABLE_REFRESH_TOKEN);
         const scopesSupported = GITLAB_OAUTH_SCOPES ?? ["api", "read_api", "read_user"];
+        const grantTypesSupported = OAUTH_DISABLE_REFRESH_TOKEN
+            ? ["authorization_code"]
+            : ["authorization_code", "refresh_token"];
         // When server URL has a path (e.g. behind Kong), the SDK's well-known metadata
         // advertises root-level endpoints. Override to use path-prefixed endpoints.
         const issuerPath = issuerUrl.pathname.replace(/\/$/, "");
@@ -12230,7 +12233,7 @@ async function startStreamableHTTPServer() {
                 response_types_supported: ["code"],
                 code_challenge_methods_supported: ["S256"],
                 token_endpoint_auth_methods_supported: ["client_secret_post", "none"],
-                grant_types_supported: ["authorization_code", "refresh_token"],
+                grant_types_supported: grantTypesSupported,
                 scopes_supported: scopesSupported,
                 revocation_endpoint_auth_methods_supported: ["client_secret_post"],
             };
@@ -12272,7 +12275,21 @@ async function startStreamableHTTPServer() {
                 });
             });
         }
-        // Mounts /.well-known/oauth-authorization-server (shadowed above when basePath set),
+        // The SDK's root metadata always lists refresh_token; shadow it with the
+        // same document minus that grant (CORS + GET/OPTIONS kept by metadataHandler).
+        if (!issuerPath && OAUTH_DISABLE_REFRESH_TOKEN) {
+            app.use("/.well-known/oauth-authorization-server", metadataHandler({
+                ...createOAuthMetadata({
+                    provider: oauthProvider,
+                    issuerUrl,
+                    baseUrl: issuerUrl,
+                    scopesSupported,
+                }),
+                grant_types_supported: grantTypesSupported,
+            }));
+        }
+        // Mounts /.well-known/oauth-authorization-server (shadowed above when basePath set
+        //        or OAUTH_DISABLE_REFRESH_TOKEN is on),
         //        /.well-known/oauth-protected-resource, /authorize, /token, /register, /revoke
         // Some proxies include the port in X-Forwarded-For (e.g. "1.2.3.4:5678" or
         // "[2001:db8::1]:5678"), which makes express-rate-limit throw

package/build/oauth-proxy.js

@@ -72,6 +72,7 @@ const CLIENT_CACHE_MAX_SIZE = 1000;
 const GROUP_MEMBERSHIP_CACHE_MAX_SIZE = 1000;
 const GROUP_MEMBERSHIP_CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes
 const GROUP_ACCESS_DENIED_MESSAGE = "Access denied: user is not a member of an allowed group";
+const REFRESH_TOKEN_DISABLED_MESSAGE = "Refresh tokens are disabled on this server (OAUTH_DISABLE_REFRESH_TOKEN); start a new authorization";
 function singleQueryParam(value) {
     return typeof value === "string" ? value : undefined;
 }
@@ -155,7 +156,11 @@ class GitLabOAuthServerProvider {
     // mode, where GitLab checks redirect_uri against the app registration.
     _redirectPolicy = null;
     _consent = null;
-    constructor(gitlabBaseUrl, gitlabAppId, resourceName, readOnly, customScopes, allowedGroups, callbackProxyEnabled = false, callbackUrl = "", stateless = null, allowedRedirectUris = DEFAULT_ALLOWED_REDIRECT_URIS) {
+    // OAUTH_DISABLE_REFRESH_TOKEN: issued tokens carry no refresh_token and the
+    // refresh_token grant is rejected, so the client re-runs the browser
+    // authorization once the GitLab access token expires.
+    _disableRefreshToken;
+    constructor(gitlabBaseUrl, gitlabAppId, resourceName, readOnly, customScopes, allowedGroups, callbackProxyEnabled = false, callbackUrl = "", stateless = null, allowedRedirectUris = DEFAULT_ALLOWED_REDIRECT_URIS, disableRefreshToken = false) {
         this._gitlabBaseUrl = gitlabBaseUrl;
         this._gitlabAppId = gitlabAppId;
         this._resourceName = resourceName;
@@ -169,6 +174,7 @@ class GitLabOAuthServerProvider {
         this._callbackProxyEnabled = callbackProxyEnabled;
         this._callbackUrl = callbackUrl;
         this._stateless = stateless;
+        this._disableRefreshToken = disableRefreshToken;
         if (callbackProxyEnabled && !callbackUrl) {
             throw new Error("callbackUrl is required when callbackProxyEnabled is true");
         }
@@ -190,6 +196,10 @@ class GitLabOAuthServerProvider {
                 `pending TTL: ${stateless.pendingTtlSeconds}s, ` +
                 `stored TTL: ${stateless.storedTtlSeconds}s)`);
         }
+        if (disableRefreshToken) {
+            logger.info("OAUTH_DISABLE_REFRESH_TOKEN enabled — refresh_token grant rejected; " +
+                "clients must re-authorize in the browser when the GitLab access token expires");
+        }
     }
     // ---- Client store (local DCR) ------------------------------------------
     get clientsStore() {
@@ -197,6 +207,7 @@ class GitLabOAuthServerProvider {
         const resourceName = this._resourceName;
         const stateless = this._stateless;
         const redirectPolicy = this._redirectPolicy;
+        const disableRefreshToken = this._disableRefreshToken;
         return {
             getClient: async (clientId) => {
                 // Stateless path: a signed client_id carries the registration.
@@ -231,7 +242,12 @@ class GitLabOAuthServerProvider {
                 };
             },
             registerClient: async (client) => {
-                const grantTypes = client.grant_types ?? ["authorization_code"];
+                let grantTypes = client.grant_types ?? ["authorization_code"];
+                if (disableRefreshToken) {
+                    // OAUTH_DISABLE_REFRESH_TOKEN: match grant_types_supported in the metadata.
+                    const withoutRefresh = grantTypes.filter((gt) => gt !== "refresh_token");
+                    grantTypes = withoutRefresh.length > 0 ? withoutRefresh : ["authorization_code"];
+                }
                 const redirectUris = client.redirect_uris ?? [];
                 // Callback proxy mode: GitLab never sees the client's redirect_uri, so
                 // this server is the only place it can be checked.
@@ -514,6 +530,12 @@ class GitLabOAuthServerProvider {
                 this._usedProxyCodes.commit(reservedProxyCode.hash, reservedProxyCode.id);
                 reservedProxyCode = null;
             }
+            if (this._disableRefreshToken) {
+                // Without a refresh_token the client cannot renew silently and has to
+                // restart authorization once the access token expires.
+                const { refresh_token: _refreshToken, ...withoutRefresh } = tokens;
+                return withoutRefresh;
+            }
             return tokens;
         }
         catch (err) {
@@ -585,6 +607,11 @@ class GitLabOAuthServerProvider {
     }
     // ---- Refresh token -----------------------------------------------------
     async exchangeRefreshToken(_client, refreshToken, scopes, resource) {
+        if (this._disableRefreshToken) {
+            // invalid_grant makes MCP clients drop stored tokens and restart the
+            // authorization_code flow; GitLab is not contacted.
+            throw new InvalidGrantError(REFRESH_TOKEN_DISABLED_MESSAGE);
+        }
         const params = new URLSearchParams({
             grant_type: "refresh_token",
             client_id: this._gitlabAppId,
@@ -736,7 +763,13 @@ class GitLabOAuthServerProvider {
                 res.status(502).send("Token exchange with GitLab failed");
                 return;
             }
-            const tokens = OAuthTokensSchema.parse(await tokenResponse.json());
+            let tokens = OAuthTokensSchema.parse(await tokenResponse.json());
+            if (this._disableRefreshToken) {
+                // Drop the refresh_token before it is stored in the LRU or sealed into
+                // the proxy code that travels through the browser.
+                const { refresh_token: _refreshToken, ...withoutRefresh } = tokens;
+                tokens = withoutRefresh;
+            }
             // Generate a proxy auth code for the MCP client. Sealed in stateless
             // mode; random UUID + LRU entry in legacy mode.
             const proxyCode = stateless
@@ -811,7 +844,10 @@ class GitLabOAuthServerProvider {
  *                        instead of an in-memory cache, enabling multi-pod deploys.
  * @param allowedRedirectUris  Callback proxy mode only: client redirect URIs that
  *                        may register and receive codes (see oauth-consent.ts).
+ * @param disableRefreshToken  When true, issued tokens omit refresh_token and the
+ *                        refresh_token grant fails with invalid_grant, so clients
+ *                        re-authorize in the browser after access-token expiry.
  */
-export function createGitLabOAuthProvider(gitlabBaseUrl, gitlabAppId, resourceName = "GitLab MCP Server", readOnly = false, customScopes, allowedGroups, callbackProxyEnabled = false, callbackUrl = "", stateless = null, allowedRedirectUris = DEFAULT_ALLOWED_REDIRECT_URIS) {
-    return new GitLabOAuthServerProvider(gitlabBaseUrl, gitlabAppId, resourceName, readOnly, customScopes, allowedGroups, callbackProxyEnabled, callbackUrl, stateless, allowedRedirectUris);
+export function createGitLabOAuthProvider(gitlabBaseUrl, gitlabAppId, resourceName = "GitLab MCP Server", readOnly = false, customScopes, allowedGroups, callbackProxyEnabled = false, callbackUrl = "", stateless = null, allowedRedirectUris = DEFAULT_ALLOWED_REDIRECT_URIS, disableRefreshToken = false) {
+    return new GitLabOAuthServerProvider(gitlabBaseUrl, gitlabAppId, resourceName, readOnly, customScopes, allowedGroups, callbackProxyEnabled, callbackUrl, stateless, allowedRedirectUris, disableRefreshToken);
 }

package/build/server/remote-http-stack.js

@@ -18,12 +18,13 @@ export async function loadRemoteHttpStack() {
     if (remoteHttpStackCache.current) {
         return remoteHttpStackCache.current;
     }
-    const [expressModule, rateLimitModule, sseModule, streamableModule, authRouterModule, bearerModule,] = await Promise.all([
+    const [expressModule, rateLimitModule, sseModule, streamableModule, authRouterModule, metadataModule, bearerModule,] = await Promise.all([
         import("express"),
         import("express-rate-limit"),
         import("@modelcontextprotocol/sdk/server/sse.js"),
         import("@modelcontextprotocol/sdk/server/streamableHttp.js"),
         import("@modelcontextprotocol/sdk/server/auth/router.js"),
+        import("@modelcontextprotocol/sdk/server/auth/handlers/metadata.js"),
         import("@modelcontextprotocol/sdk/server/auth/middleware/bearerAuth.js"),
     ]);
     remoteHttpStackCache.current = {
@@ -33,6 +34,8 @@ export async function loadRemoteHttpStack() {
         SSEServerTransport: sseModule.SSEServerTransport,
         StreamableHTTPServerTransport: streamableModule.StreamableHTTPServerTransport,
         mcpAuthRouter: authRouterModule.mcpAuthRouter,
+        createOAuthMetadata: authRouterModule.createOAuthMetadata,
+        metadataHandler: metadataModule.metadataHandler,
         requireBearerAuth: bearerModule.requireBearerAuth,
     };
     return remoteHttpStackCache.current;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zereight/mcp-gitlab",
-  "version": "2.3.6",
+  "version": "2.3.7-next.136",
   "mcpName": "io.github.zereight/gitlab-mcp",
   "description": "GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more",
   "keywords": [
@@ -49,7 +49,6 @@
     "prepare": "npm run build",
     "dev": "npm run build && node build/index.js",
     "watch": "tsc -p tsconfig.build.json --watch",
-    "deploy": "npm publish --access public",
     "changelog": "auto-changelog -p",
     "test": "npm run test:all",
     "test:all": "npm run build && npm run test:mock && npm run test:live",