Repository navigation

Security: OAuth callback does not validate `state` parameter - #1189

Closed

tuanaiseo wants to merge 4 commits into

modelcontextprotocol:v1/mainfrom

tuanaiseo:contribai/fix/security/oauth-callback-does-not-validate-state-p

Closed

Security: OAuth callback does not validate `state` parameter#1189
tuanaiseo wants to merge 4 commits into
modelcontextprotocol:v1/mainfrom
tuanaiseo:contribai/fix/security/oauth-callback-does-not-validate-state-p

Commits on Apr 11, 2026
- fix(security): oauth callback does not validate `state` parameter
  tuanaiseo
  committed
  6a5018d
- fix(security): oauth callback does not validate `state` parameter
  tuanaiseo
  committed
  4a10a2e
Commits on Aug 19, 2026
- fix(security): persist the OAuth `state` so the callback can verify it
  cliffhall
  committed
  6cd5a8e
- fix(security): validate the OAuth `state` on error callbacks too
  cliffhall
  committed
  5bc1713