v1.3.5

denizsafak/abogenv1.3.5Aug 7, 2026by harijoe

Upgrading?

AI Summary

Fixes authentication flow issues for hosted authorization servers by correctly scoping forwarded headers.

Key Highlights

  • Fixes OAuth flow for WorkOS, Auth0, Clerk, and Stytch.
  • Headers are now correctly scoped to the MCP server origin.
  • Resolves browser preflight issues during cross-origin discovery.

Full Release Notes

Fixes the DevTools OAuth flow against a hosted authorization server (WorkOS AuthKit, Auth0, Clerk, Stytch). DevTools sent its `x-forwarded-*` headers on the cross-origin discovery, registration and token requests too, so the browser preflighted them and the flow stopped at `.well-known/openid-configuration`.

## Changes

- fix(devtools): scope forwarded headers to the MCP server origin @muralx (#1024)

Related Repositories