黄云龙 b963282f5e

fix(mcp): per-server fail-soft OAuth priming + persist rotated refresh_token (#4084) ...

get_initial_oauth_headers() now wraps each server's token fetch in
try/except so one broken OAuth server does not abort the entire
multi-server MCP tool load (which returned [] from the outer except,
dropping every server's tools).

_fetch_token() now captures a rotated refresh_token from the token
response and updates the in-memory McpOAuthConfig so subsequent
refreshes use the latest value instead of the stale original, which
fails with invalid_grant on providers that rotate refresh tokens
(Auth0, Okta, Google, etc.).

Adds regression tests:
- One failing OAuth server still yields the healthy server's headers
- Rotated refresh_token is posted on the next refresh attempt

Co-authored-by: Claude <noreply@anthropic.com>

2026-07-12 11:59:36 +08:00

..

deerflow

fix(mcp): per-server fail-soft OAuth priming + persist rotated refresh_token (#4084)

2026-07-12 11:59:36 +08:00

pyproject.toml

feat(sandbox): warm pool for boxlite (#3951)

2026-07-06 07:21:12 +08:00