v1.3.5

NVIDIA/cosmosv1.3.5Aug 7, 2026by harijoe

Upgrading?

AI Summary

A maintenance release fixing OAuth flow issues in Skybridge DevTools when using hosted authorization servers like WorkOS AuthKit and Auth0.

Key Highlights

  • Fixed DevTools OAuth flow by scoping forwarded headers to the MCP server origin.
  • Resolves browser preflight failures during cross-origin discovery and token requests.

New Features

  • OAuth header scoping fix

Full Release Notes

Fixes the DevTools OAuth flow against a hosted authorization server (WorkOS AuthKit, Auth0, Clerk, Stytch). DevTools sent its `x-forwarded-*` headers on the cross-origin discovery, registration and token requests too, so the browser preflighted them and the flow stopped at `.well-known/openid-configuration`.

## Changes

- fix(devtools): scope forwarded headers to the MCP server origin @muralx (#1024)

Related Repositories