mirror of
https://github.com/discourse/discourse.git
synced 2026-08-09 21:45:25 +08:00
edead80936Some MCP OAuth providers only support `client_secret_post` at the token
endpoint.
This stores the discovered token endpoint auth methods and reuses them
for callback and refresh flows. Here's an example of what we're now
saving as part of this change e.g.
```
{
...
"oauth_status": "connected",
"oauth_issuer": "https://mcp.hubspot.com",
"oauth_authorization_endpoint": "https://mcp.hubspot.com/oauth/authorize/user",
"oauth_token_endpoint": "https://mcp.hubspot.com/oauth/v3/token",
"oauth_token_endpoint_auth_methods_supported": ["client_secret_post"],
...
}
```
|
||
|---|---|---|
| .. | ||
| client_spec.rb | ||
| oauth_client_registration_spec.rb | ||
| oauth_flow_spec.rb | ||
| tool_registry_spec.rb | ||
