Marc-André Bombeck 4783711651 Refuse MCP and its OAuth endpoints while the encryption key does not match ...

apiHandler answers 503 encryption.key_mismatch before auth, but the remote
MCP endpoint and the OAuth authorize, token and register routes wrap in
withBackgroundEvent instead and never checked. An MCP write tool could seal
new rows under the wrong key, and those rows would open under it at the
next boot.

The refusal moves into one helper used by apiHandler, /mcp (same envelope)
and the OAuth routes (RFC 6749 temporarily_unavailable with the error code
as an extension member). A structural test fails when a route outside
apiHandler, or a server action, lacks the refusal in every exported handler
and is not on a short allowlist of routes that never touch the database.

2026-10-03 23:32:07 +02:00

..

connections

fix(mcp): close OAuth 2.1 resource-server gaps before the remote surface ships

2026-06-27 15:09:11 +02:00

oauth

Refuse MCP and its OAuth endpoints while the encryption key does not match

2026-10-03 23:32:07 +02:00

tokens

docs(comments): correct four comments that describe gates and mints that no longer exist

2026-10-01 10:06:39 +02:00