v1.3.5

QwenLM/Qwen-MM-Pluginsv1.3.5Aug 7, 2026by harijoe

Upgrading?

AI Summary

v1.3.5 addresses a critical bug in the DevTools OAuth flow that was preventing successful authentication with hosted authorization servers like WorkOS and Auth0.

Key Highlights

  • Fixed DevTools OAuth flow against hosted authorization servers (WorkOS, Auth0, Clerk, Stytch).
  • Scoped forwarded headers to the MCP server origin to resolve cross-origin issues.

Full Release Notes

Fixes the DevTools OAuth flow against a hosted authorization server (WorkOS AuthKit, Auth0, Clerk, Stytch). DevTools sent its `x-forwarded-*` headers on the cross-origin discovery, registration and token requests too, so the browser preflighted them and the flow stopped at `.well-known/openid-configuration`.

## Changes

- fix(devtools): scope forwarded headers to the MCP server origin @muralx (#1024)

Related Repositories