Marc-André Bombeck 660dffef37 feat(mcp): accept the OIDC application_type in dynamic client registration ...

Honour the OIDC dynamic-registration application_type field on the
register endpoint: validate it to the closed set (web/native) when
present, reject a malformed value with invalid_client_metadata, default
to web when omitted, and echo the resolved value back in the
client-information response.

Forward-compatible with OIDC-style clients without changing the
redirect-URI rules (still HTTPS-or-loopback, authoritatively matched at
authorize) or any other registration behaviour.

2026-06-28 01:00:51 +02:00

..

connections

fix(mcp): close OAuth 2.1 resource-server gaps before the remote surface ships

2026-06-27 15:09:11 +02:00

oauth

feat(mcp): accept the OIDC application_type in dynamic client registration

2026-06-28 01:00:51 +02:00

tokens

feat(mcp): allow minting and consenting to health:write connector tokens

2026-06-27 17:38:51 +02:00