fastmcp 4.20.17 → 4.21.0

package/README.md

@@ -633,7 +633,9 @@ server.addTool({
 
 Works for `outputSchema` too. Note that FastMCP advertises input schemas with
 `additionalProperties: false`, whatever your schema said — the same treatment
-Zod and Valibot schemas get. Output schemas keep whatever additional-properties
+Zod and Valibot schemas get. The exception is a dictionary (an object with no
+`properties` and an `additionalProperties` schema, like `z.record()`), which
+keeps its value schema. Output schemas keep whatever additional-properties
 rule your schema declared.
 
 Unlike the schema libraries above, a plain JSON Schema carries no TypeScript

package/dist/FastMCP.cjs

@@ -11,7 +11,7 @@
 
 
 
-var _chunk3V4NDT6Bcjs = require('./chunk-3V4NDT6B.cjs');
+var _chunkJ5E7VICRcjs = require('./chunk-J5E7VICR.cjs');
 
 
 
@@ -24,7 +24,7 @@ var _chunk3V4NDT6Bcjs = require('./chunk-3V4NDT6B.cjs');
 
 
 
-var _chunkBTXI2HQScjs = require('./chunk-BTXI2HQS.cjs');
+var _chunkGTPK7A57cjs = require('./chunk-GTPK7A57.cjs');
 
 
 
@@ -49,5 +49,5 @@ var _chunkBTXI2HQScjs = require('./chunk-BTXI2HQS.cjs');
 
 
 
-exports.AuthProvider = _chunkBTXI2HQScjs.AuthProvider; exports.AzureProvider = _chunkBTXI2HQScjs.AzureProvider; exports.DiscoveryDocumentCache = _chunk3V4NDT6Bcjs.DiscoveryDocumentCache; exports.FastMCP = _chunk3V4NDT6Bcjs.FastMCP; exports.FastMCPError = _chunk3V4NDT6Bcjs.FastMCPError; exports.FastMCPSession = _chunk3V4NDT6Bcjs.FastMCPSession; exports.GitHubProvider = _chunkBTXI2HQScjs.GitHubProvider; exports.GoogleProvider = _chunkBTXI2HQScjs.GoogleProvider; exports.MEDIA_FETCH_TIMEOUT_MS = _chunk3V4NDT6Bcjs.MEDIA_FETCH_TIMEOUT_MS; exports.OAuthProvider = _chunkBTXI2HQScjs.OAuthProvider; exports.ServerState = _chunk3V4NDT6Bcjs.ServerState; exports.SessionError = _chunk3V4NDT6Bcjs.SessionError; exports.UnexpectedStateError = _chunk3V4NDT6Bcjs.UnexpectedStateError; exports.UserError = _chunk3V4NDT6Bcjs.UserError; exports.audioContent = _chunk3V4NDT6Bcjs.audioContent; exports.getAuthSession = _chunkBTXI2HQScjs.getAuthSession; exports.imageContent = _chunk3V4NDT6Bcjs.imageContent; exports.jsonSchemaAdapter = _chunk3V4NDT6Bcjs.jsonSchemaAdapter; exports.requireAll = _chunkBTXI2HQScjs.requireAll; exports.requireAny = _chunkBTXI2HQScjs.requireAny; exports.requireAuth = _chunkBTXI2HQScjs.requireAuth; exports.requireRole = _chunkBTXI2HQScjs.requireRole; exports.requireScopes = _chunkBTXI2HQScjs.requireScopes;
+exports.AuthProvider = _chunkGTPK7A57cjs.AuthProvider; exports.AzureProvider = _chunkGTPK7A57cjs.AzureProvider; exports.DiscoveryDocumentCache = _chunkJ5E7VICRcjs.DiscoveryDocumentCache; exports.FastMCP = _chunkJ5E7VICRcjs.FastMCP; exports.FastMCPError = _chunkJ5E7VICRcjs.FastMCPError; exports.FastMCPSession = _chunkJ5E7VICRcjs.FastMCPSession; exports.GitHubProvider = _chunkGTPK7A57cjs.GitHubProvider; exports.GoogleProvider = _chunkGTPK7A57cjs.GoogleProvider; exports.MEDIA_FETCH_TIMEOUT_MS = _chunkJ5E7VICRcjs.MEDIA_FETCH_TIMEOUT_MS; exports.OAuthProvider = _chunkGTPK7A57cjs.OAuthProvider; exports.ServerState = _chunkJ5E7VICRcjs.ServerState; exports.SessionError = _chunkJ5E7VICRcjs.SessionError; exports.UnexpectedStateError = _chunkJ5E7VICRcjs.UnexpectedStateError; exports.UserError = _chunkJ5E7VICRcjs.UserError; exports.audioContent = _chunkJ5E7VICRcjs.audioContent; exports.getAuthSession = _chunkGTPK7A57cjs.getAuthSession; exports.imageContent = _chunkJ5E7VICRcjs.imageContent; exports.jsonSchemaAdapter = _chunkJ5E7VICRcjs.jsonSchemaAdapter; exports.requireAll = _chunkGTPK7A57cjs.requireAll; exports.requireAny = _chunkGTPK7A57cjs.requireAny; exports.requireAuth = _chunkGTPK7A57cjs.requireAuth; exports.requireRole = _chunkGTPK7A57cjs.requireRole; exports.requireScopes = _chunkGTPK7A57cjs.requireScopes;
 //# sourceMappingURL=FastMCP.cjs.map

package/dist/FastMCP.d.cts

@@ -12,8 +12,8 @@ import { CorsOptions } from 'mcp-proxy';
 export { CorsOptions } from 'mcp-proxy';
 import { StrictEventEmitter } from 'strict-event-emitter-types';
 import { z } from 'zod';
-import { A as AuthProvider, O as OAuthSession, a as OAuthProxy } from './OAuthProvider-Dy1PbWAT.cjs';
-export { j as AuthProviderConfig, b as AzureProvider, k as AzureProviderConfig, l as AzureSession, m as GenericOAuthProviderConfig, G as GitHubProvider, n as GitHubSession, c as GoogleProvider, o as GoogleSession, d as OAuthProvider, g as getAuthSession, r as requireAll, e as requireAny, f as requireAuth, h as requireRole, i as requireScopes } from './OAuthProvider-Dy1PbWAT.cjs';
+import { A as AuthProvider, O as OAuthSession, a as OAuthProxy } from './OAuthProvider-C4idKF29.cjs';
+export { j as AuthProviderConfig, b as AzureProvider, k as AzureProviderConfig, l as AzureSession, m as GenericOAuthProviderConfig, G as GitHubProvider, n as GitHubSession, c as GoogleProvider, o as GoogleSession, d as OAuthProvider, g as getAuthSession, r as requireAll, e as requireAny, f as requireAuth, h as requireRole, i as requireScopes } from './OAuthProvider-C4idKF29.cjs';
 import 'node:http';
 
 declare class DiscoveryDocumentCache {
@@ -503,6 +503,7 @@ type ServerOptions<T extends FastMCPSessionAuth> = {
          */
         authorizationServer?: {
             authorizationEndpoint: string;
+            authorizationResponseIssParameterSupported?: boolean;
             clientIdMetadataDocumentSupported?: boolean;
             codeChallengeMethodsSupported?: string[];
             dpopSigningAlgValuesSupported?: string[];

package/dist/FastMCP.d.ts

@@ -12,8 +12,8 @@ import { CorsOptions } from 'mcp-proxy';
 export { CorsOptions } from 'mcp-proxy';
 import { StrictEventEmitter } from 'strict-event-emitter-types';
 import { z } from 'zod';
-import { A as AuthProvider, O as OAuthSession, a as OAuthProxy } from './OAuthProvider-Dy1PbWAT.js';
-export { j as AuthProviderConfig, b as AzureProvider, k as AzureProviderConfig, l as AzureSession, m as GenericOAuthProviderConfig, G as GitHubProvider, n as GitHubSession, c as GoogleProvider, o as GoogleSession, d as OAuthProvider, g as getAuthSession, r as requireAll, e as requireAny, f as requireAuth, h as requireRole, i as requireScopes } from './OAuthProvider-Dy1PbWAT.js';
+import { A as AuthProvider, O as OAuthSession, a as OAuthProxy } from './OAuthProvider-C4idKF29.js';
+export { j as AuthProviderConfig, b as AzureProvider, k as AzureProviderConfig, l as AzureSession, m as GenericOAuthProviderConfig, G as GitHubProvider, n as GitHubSession, c as GoogleProvider, o as GoogleSession, d as OAuthProvider, g as getAuthSession, r as requireAll, e as requireAny, f as requireAuth, h as requireRole, i as requireScopes } from './OAuthProvider-C4idKF29.js';
 import 'node:http';
 
 declare class DiscoveryDocumentCache {
@@ -503,6 +503,7 @@ type ServerOptions<T extends FastMCPSessionAuth> = {
          */
         authorizationServer?: {
             authorizationEndpoint: string;
+            authorizationResponseIssParameterSupported?: boolean;
             clientIdMetadataDocumentSupported?: boolean;
             codeChallengeMethodsSupported?: string[];
             dpopSigningAlgValuesSupported?: string[];

package/dist/FastMCP.js

@@ -11,7 +11,7 @@ import {
   audioContent,
   imageContent,
   jsonSchemaAdapter
-} from "./chunk-XFDX4BNP.js";
+} from "./chunk-XQ2CLYB3.js";
 import {
   AuthProvider,
   AzureProvider,
@@ -24,7 +24,7 @@ import {
   requireAuth,
   requireRole,
   requireScopes
-} from "./chunk-YRIK6EIY.js";
+} from "./chunk-AR3LVWUF.js";
 export {
   AuthProvider,
   AzureProvider,

package/dist/{OAuthProvider-Dy1PbWAT.d.cts → OAuthProvider-C4idKF29.d.cts}

@@ -223,6 +223,13 @@ interface OAuthProxyConfig {
     allowPlainPkce?: boolean;
     /** Authorization code TTL in seconds (default: 300) */
     authorizationCodeTtl?: number;
+    /**
+     * Add `iss` to authorization responses and advertise
+     * `authorization_response_iss_parameter_supported` (RFC 9207; default: true).
+     * Note that ChatGPT uses its stable callback URI only for servers that
+     * advertise it, and a per-connector one otherwise.
+     */
+    authorizationResponseIss?: boolean;
     /** Base URL of this proxy server */
     baseUrl: string;
     /** Require user consent (default: true) */
@@ -537,6 +544,7 @@ declare class OAuthProxy {
      */
     getAuthorizationServerMetadata(): {
         authorizationEndpoint: string;
+        authorizationResponseIssParameterSupported?: boolean;
         clientIdMetadataDocumentSupported?: boolean;
         codeChallengeMethodsSupported?: string[];
         dpopSigningAlgValuesSupported?: string[];

package/dist/{OAuthProvider-Dy1PbWAT.d.ts → OAuthProvider-C4idKF29.d.ts}

@@ -223,6 +223,13 @@ interface OAuthProxyConfig {
     allowPlainPkce?: boolean;
     /** Authorization code TTL in seconds (default: 300) */
     authorizationCodeTtl?: number;
+    /**
+     * Add `iss` to authorization responses and advertise
+     * `authorization_response_iss_parameter_supported` (RFC 9207; default: true).
+     * Note that ChatGPT uses its stable callback URI only for servers that
+     * advertise it, and a per-connector one otherwise.
+     */
+    authorizationResponseIss?: boolean;
     /** Base URL of this proxy server */
     baseUrl: string;
     /** Require user consent (default: true) */
@@ -537,6 +544,7 @@ declare class OAuthProxy {
      */
     getAuthorizationServerMetadata(): {
         authorizationEndpoint: string;
+        authorizationResponseIssParameterSupported?: boolean;
         clientIdMetadataDocumentSupported?: boolean;
         codeChallengeMethodsSupported?: string[];
         dpopSigningAlgValuesSupported?: string[];

package/dist/auth/index.cjs

@@ -24,7 +24,7 @@
 
 
 
-var _chunkBTXI2HQScjs = require('../chunk-BTXI2HQS.cjs');
+var _chunkGTPK7A57cjs = require('../chunk-GTPK7A57.cjs');
 
 
 
@@ -51,5 +51,5 @@ var _chunkBTXI2HQScjs = require('../chunk-BTXI2HQS.cjs');
 
 
 
-exports.AuthProvider = _chunkBTXI2HQScjs.AuthProvider; exports.AzureProvider = _chunkBTXI2HQScjs.AzureProvider; exports.ConsentManager = _chunkBTXI2HQScjs.ConsentManager; exports.DEFAULT_ACCESS_TOKEN_TTL = _chunkBTXI2HQScjs.DEFAULT_ACCESS_TOKEN_TTL; exports.DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH = _chunkBTXI2HQScjs.DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH; exports.DEFAULT_AUTHORIZATION_CODE_TTL = _chunkBTXI2HQScjs.DEFAULT_AUTHORIZATION_CODE_TTL; exports.DEFAULT_REFRESH_TOKEN_TTL = _chunkBTXI2HQScjs.DEFAULT_REFRESH_TOKEN_TTL; exports.DEFAULT_TRANSACTION_TTL = _chunkBTXI2HQScjs.DEFAULT_TRANSACTION_TTL; exports.DiskStore = _chunkBTXI2HQScjs.DiskStore; exports.EncryptedTokenStorage = _chunkBTXI2HQScjs.EncryptedTokenStorage; exports.GitHubProvider = _chunkBTXI2HQScjs.GitHubProvider; exports.GoogleProvider = _chunkBTXI2HQScjs.GoogleProvider; exports.JWKSVerifier = _chunkBTXI2HQScjs.JWKSVerifier; exports.JWTIssuer = _chunkBTXI2HQScjs.JWTIssuer; exports.MemoryTokenStorage = _chunkBTXI2HQScjs.MemoryTokenStorage; exports.OAuthProvider = _chunkBTXI2HQScjs.OAuthProvider; exports.OAuthProxy = _chunkBTXI2HQScjs.OAuthProxy; exports.OAuthProxyError = _chunkBTXI2HQScjs.OAuthProxyError; exports.PKCEUtils = _chunkBTXI2HQScjs.PKCEUtils; exports.getAuthSession = _chunkBTXI2HQScjs.getAuthSession; exports.requireAll = _chunkBTXI2HQScjs.requireAll; exports.requireAny = _chunkBTXI2HQScjs.requireAny; exports.requireAuth = _chunkBTXI2HQScjs.requireAuth; exports.requireRole = _chunkBTXI2HQScjs.requireRole; exports.requireScopes = _chunkBTXI2HQScjs.requireScopes;
+exports.AuthProvider = _chunkGTPK7A57cjs.AuthProvider; exports.AzureProvider = _chunkGTPK7A57cjs.AzureProvider; exports.ConsentManager = _chunkGTPK7A57cjs.ConsentManager; exports.DEFAULT_ACCESS_TOKEN_TTL = _chunkGTPK7A57cjs.DEFAULT_ACCESS_TOKEN_TTL; exports.DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH = _chunkGTPK7A57cjs.DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH; exports.DEFAULT_AUTHORIZATION_CODE_TTL = _chunkGTPK7A57cjs.DEFAULT_AUTHORIZATION_CODE_TTL; exports.DEFAULT_REFRESH_TOKEN_TTL = _chunkGTPK7A57cjs.DEFAULT_REFRESH_TOKEN_TTL; exports.DEFAULT_TRANSACTION_TTL = _chunkGTPK7A57cjs.DEFAULT_TRANSACTION_TTL; exports.DiskStore = _chunkGTPK7A57cjs.DiskStore; exports.EncryptedTokenStorage = _chunkGTPK7A57cjs.EncryptedTokenStorage; exports.GitHubProvider = _chunkGTPK7A57cjs.GitHubProvider; exports.GoogleProvider = _chunkGTPK7A57cjs.GoogleProvider; exports.JWKSVerifier = _chunkGTPK7A57cjs.JWKSVerifier; exports.JWTIssuer = _chunkGTPK7A57cjs.JWTIssuer; exports.MemoryTokenStorage = _chunkGTPK7A57cjs.MemoryTokenStorage; exports.OAuthProvider = _chunkGTPK7A57cjs.OAuthProvider; exports.OAuthProxy = _chunkGTPK7A57cjs.OAuthProxy; exports.OAuthProxyError = _chunkGTPK7A57cjs.OAuthProxyError; exports.PKCEUtils = _chunkGTPK7A57cjs.PKCEUtils; exports.getAuthSession = _chunkGTPK7A57cjs.getAuthSession; exports.requireAll = _chunkGTPK7A57cjs.requireAll; exports.requireAny = _chunkGTPK7A57cjs.requireAny; exports.requireAuth = _chunkGTPK7A57cjs.requireAuth; exports.requireRole = _chunkGTPK7A57cjs.requireRole; exports.requireScopes = _chunkGTPK7A57cjs.requireScopes;
 //# sourceMappingURL=index.cjs.map

package/dist/auth/index.d.cts

@@ -1,5 +1,5 @@
-import { p as OAuthTransaction, C as ConsentData, T as TokenStorage, q as TokenVerifier, s as TokenVerificationResult, P as PKCEPair } from '../OAuthProvider-Dy1PbWAT.cjs';
-export { A as AuthProvider, j as AuthProviderConfig, y as AuthorizationParams, b as AzureProvider, k as AzureProviderConfig, l as AzureSession, z as ClientCode, B as DCRClientMetadata, E as DCRRequest, F as DCRResponse, D as DEFAULT_ACCESS_TOKEN_TTL, u as DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH, v as DEFAULT_AUTHORIZATION_CODE_TTL, w as DEFAULT_REFRESH_TOKEN_TTL, x as DEFAULT_TRANSACTION_TTL, m as GenericOAuthProviderConfig, G as GitHubProvider, n as GitHubSession, c as GoogleProvider, o as GoogleSession, H as OAuthError, d as OAuthProvider, I as OAuthProviderConfig, a as OAuthProxy, J as OAuthProxyConfig, t as OAuthProxyError, O as OAuthSession, K as ProxyDCRClient, R as RefreshRequest, L as TokenMapping, M as TokenRequest, N as TokenResponse, U as UpstreamTokenSet, g as getAuthSession, r as requireAll, e as requireAny, f as requireAuth, h as requireRole, i as requireScopes } from '../OAuthProvider-Dy1PbWAT.cjs';
+import { p as OAuthTransaction, C as ConsentData, T as TokenStorage, q as TokenVerifier, s as TokenVerificationResult, P as PKCEPair } from '../OAuthProvider-C4idKF29.cjs';
+export { A as AuthProvider, j as AuthProviderConfig, y as AuthorizationParams, b as AzureProvider, k as AzureProviderConfig, l as AzureSession, z as ClientCode, B as DCRClientMetadata, E as DCRRequest, F as DCRResponse, D as DEFAULT_ACCESS_TOKEN_TTL, u as DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH, v as DEFAULT_AUTHORIZATION_CODE_TTL, w as DEFAULT_REFRESH_TOKEN_TTL, x as DEFAULT_TRANSACTION_TTL, m as GenericOAuthProviderConfig, G as GitHubProvider, n as GitHubSession, c as GoogleProvider, o as GoogleSession, H as OAuthError, d as OAuthProvider, I as OAuthProviderConfig, a as OAuthProxy, J as OAuthProxyConfig, t as OAuthProxyError, O as OAuthSession, K as ProxyDCRClient, R as RefreshRequest, L as TokenMapping, M as TokenRequest, N as TokenResponse, U as UpstreamTokenSet, g as getAuthSession, r as requireAll, e as requireAny, f as requireAuth, h as requireRole, i as requireScopes } from '../OAuthProvider-C4idKF29.cjs';
 import 'node:http';
 
 /**

package/dist/auth/index.d.ts

@@ -1,5 +1,5 @@
-import { p as OAuthTransaction, C as ConsentData, T as TokenStorage, q as TokenVerifier, s as TokenVerificationResult, P as PKCEPair } from '../OAuthProvider-Dy1PbWAT.js';
-export { A as AuthProvider, j as AuthProviderConfig, y as AuthorizationParams, b as AzureProvider, k as AzureProviderConfig, l as AzureSession, z as ClientCode, B as DCRClientMetadata, E as DCRRequest, F as DCRResponse, D as DEFAULT_ACCESS_TOKEN_TTL, u as DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH, v as DEFAULT_AUTHORIZATION_CODE_TTL, w as DEFAULT_REFRESH_TOKEN_TTL, x as DEFAULT_TRANSACTION_TTL, m as GenericOAuthProviderConfig, G as GitHubProvider, n as GitHubSession, c as GoogleProvider, o as GoogleSession, H as OAuthError, d as OAuthProvider, I as OAuthProviderConfig, a as OAuthProxy, J as OAuthProxyConfig, t as OAuthProxyError, O as OAuthSession, K as ProxyDCRClient, R as RefreshRequest, L as TokenMapping, M as TokenRequest, N as TokenResponse, U as UpstreamTokenSet, g as getAuthSession, r as requireAll, e as requireAny, f as requireAuth, h as requireRole, i as requireScopes } from '../OAuthProvider-Dy1PbWAT.js';
+import { p as OAuthTransaction, C as ConsentData, T as TokenStorage, q as TokenVerifier, s as TokenVerificationResult, P as PKCEPair } from '../OAuthProvider-C4idKF29.js';
+export { A as AuthProvider, j as AuthProviderConfig, y as AuthorizationParams, b as AzureProvider, k as AzureProviderConfig, l as AzureSession, z as ClientCode, B as DCRClientMetadata, E as DCRRequest, F as DCRResponse, D as DEFAULT_ACCESS_TOKEN_TTL, u as DEFAULT_ACCESS_TOKEN_TTL_NO_REFRESH, v as DEFAULT_AUTHORIZATION_CODE_TTL, w as DEFAULT_REFRESH_TOKEN_TTL, x as DEFAULT_TRANSACTION_TTL, m as GenericOAuthProviderConfig, G as GitHubProvider, n as GitHubSession, c as GoogleProvider, o as GoogleSession, H as OAuthError, d as OAuthProvider, I as OAuthProviderConfig, a as OAuthProxy, J as OAuthProxyConfig, t as OAuthProxyError, O as OAuthSession, K as ProxyDCRClient, R as RefreshRequest, L as TokenMapping, M as TokenRequest, N as TokenResponse, U as UpstreamTokenSet, g as getAuthSession, r as requireAll, e as requireAny, f as requireAuth, h as requireRole, i as requireScopes } from '../OAuthProvider-C4idKF29.js';
 import 'node:http';
 
 /**

package/dist/auth/index.js

@@ -24,7 +24,7 @@ import {
   requireAuth,
   requireRole,
   requireScopes
-} from "../chunk-YRIK6EIY.js";
+} from "../chunk-AR3LVWUF.js";
 export {
   AuthProvider,
   AzureProvider,

package/dist/{chunk-YRIK6EIY.js → chunk-AR3LVWUF.js}

@@ -1359,6 +1359,7 @@ var OAuthProxy = class {
     this.config = {
       allowPlainPkce: true,
       authorizationCodeTtl: DEFAULT_AUTHORIZATION_CODE_TTL,
+      authorizationResponseIss: true,
       consentRequired: true,
       enableCimd: false,
       enableTokenSwap: true,
@@ -1580,6 +1581,7 @@ var OAuthProxy = class {
   getAuthorizationServerMetadata() {
     return {
       authorizationEndpoint: `${this.config.baseUrl}/oauth/authorize`,
+      ...this.config.authorizationResponseIss ? { authorizationResponseIssParameterSupported: true } : {},
       ...this.config.enableCimd ? { clientIdMetadataDocumentSupported: true } : {},
       codeChallengeMethodsSupported: this.config.allowPlainPkce ? ["S256", "plain"] : ["S256"],
       grantTypesSupported: ["authorization_code", "refresh_token"],
@@ -1630,6 +1632,9 @@ var OAuthProxy = class {
     const redirectUrl = new URL(transaction.clientCallbackUrl);
     redirectUrl.searchParams.set("code", clientCode);
     redirectUrl.searchParams.set("state", transaction.state);
+    if (this.config.authorizationResponseIss) {
+      redirectUrl.searchParams.set("iss", this.config.baseUrl);
+    }
     return new Response(null, {
       headers: {
         Location: redirectUrl.toString()
@@ -1675,6 +1680,9 @@ var OAuthProxy = class {
         "User denied authorization"
       );
       redirectUrl.searchParams.set("state", transaction.state);
+      if (this.config.authorizationResponseIss) {
+        redirectUrl.searchParams.set("iss", this.config.baseUrl);
+      }
       return new Response(null, {
         headers: {
           Location: redirectUrl.toString()
@@ -3090,4 +3098,4 @@ export {
   DiskStore,
   JWKSVerifier
 };
-//# sourceMappingURL=chunk-YRIK6EIY.js.map
+//# sourceMappingURL=chunk-AR3LVWUF.js.map