muxed 0.2.0 → 0.2.1

package/dist/cli.mjs

@@ -474,6 +474,7 @@ var AuthorizationCodeProvider = class {
 	config;
 	_redirectUrl;
 	hadTokensBefore = false;
+	_state = crypto.randomBytes(32).toString("base64url");
 	constructor(config, serverName) {
 		this.serverName = serverName;
 		this.config = config;
@@ -481,14 +482,14 @@ var AuthorizationCodeProvider = class {
 		this.hadTokensBefore = this.store.hasTokens();
 	}
 	setRedirectUrl(port) {
-		this._redirectUrl = `http://127.0.0.1:${port}/oauth/callback`;
+		this._redirectUrl = `http://localhost:${port}/callback`;
 	}
 	get redirectUrl() {
 		return this._redirectUrl;
 	}
 	get clientMetadata() {
 		return {
-			redirect_uris: [this._redirectUrl ?? "http://127.0.0.1/oauth/callback"],
+			redirect_uris: [this._redirectUrl ?? "http://localhost/callback"],
 			token_endpoint_auth_method: this.config.clientSecret ? "client_secret_basic" : "none",
 			grant_types: ["authorization_code", "refresh_token"],
 			response_types: ["code"],
@@ -501,7 +502,14 @@ var AuthorizationCodeProvider = class {
 			client_id: this.config.clientId,
 			...this.config.clientSecret ? { client_secret: this.config.clientSecret } : {}
 		};
-		return this.store.getClientInformation();
+		const cached = this.store.getClientInformation();
+		if (cached && this._redirectUrl) {
+			if (!(cached.redirect_uris ?? []).includes(this._redirectUrl)) {
+				this.store.clearClientInformation();
+				return;
+			}
+		}
+		return cached;
 	}
 	saveClientInformation(info) {
 		this.store.saveClientInformation(info);
@@ -522,6 +530,9 @@ var AuthorizationCodeProvider = class {
 			openBrowser(url);
 		}
 	}
+	async state() {
+		return this._state;
+	}
 	saveCodeVerifier(codeVerifier) {
 		this.store.saveCodeVerifier(codeVerifier);
 	}
@@ -580,8 +591,8 @@ var CallbackServer = class {
 					res.end();
 					return;
 				}
-				const url = new URL(req.url ?? "/", `http://127.0.0.1`);
-				if (url.pathname !== "/oauth/callback") {
+				const url = new URL(req.url ?? "/", `http://localhost`);
+				if (url.pathname !== "/callback") {
 					res.writeHead(404);
 					res.end("Not found");
 					return;
@@ -615,7 +626,7 @@ var CallbackServer = class {
 					state
 				});
 			});
-			this.server.listen(port, "127.0.0.1", () => {
+			this.server.listen(port, "localhost", () => {
 				const addr = this.server.address();
 				if (addr && typeof addr === "object") this._port = addr.port;
 			});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "muxed",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "MCP server daemon and aggregator CLI – aggregate all your Model Context Protocol servers behind a single background daemon with lazy start, auto-reconnect, and idle shutdown",
   "type": "module",
   "exports": {