v1.3.5

dmtrKovalenko/fffv1.3.5Aug 7, 2026by harijoe

AI Summary

A hotfix for DevTools OAuth flow issues to ensure compatibility with hosted authorization servers.

Key Highlights

Fixes DevTools OAuth flow against WorkOS, Auth0, Clerk, and Stytch
Fixes header scoping for cross-origin requests

Full Release Notes

Fixes the DevTools OAuth flow against a hosted authorization server (WorkOS AuthKit, Auth0, Clerk, Stytch). DevTools sent its `x-forwarded-*` headers on the cross-origin discovery, registration and token requests too, so the browser preflighted them and the flow stopped at `.well-known/openid-configuration`.

## Changes

- fix(devtools): scope forwarded headers to the MCP server origin @muralx (#1024)