v1.3.5

Rouf0x/splatfpvv1.3.5Aug 7, 2026by harijoe

Upgrading?

AI Summary

Fixes DevTools OAuth flow issues against hosted authorization servers (WorkOS AuthKit, Auth0, Clerk, Stytch) by ensuring forwarded headers are scoped only to the MCP server origin, preventing cross-origin preflight failures.

Key Highlights

  • Fixes OAuth flow against hosted authorization servers.
  • Scope forwarded headers to the MCP server origin.
  • Resolves browser preflight issues at `.well-known/openid-configuration`.

Full Release Notes

Fixes the DevTools OAuth flow against a hosted authorization server (WorkOS AuthKit, Auth0, Clerk, Stytch). DevTools sent its `x-forwarded-*` headers on the cross-origin discovery, registration and token requests too, so the browser preflighted them and the flow stopped at `.well-known/openid-configuration`.

## Changes

- fix(devtools): scope forwarded headers to the MCP server origin @muralx (#1024)

Related Repositories