v1.3.5

magnitudedev/magnitudev1.3.5Aug 7, 2026by harijoe

Upgrading?

AI Summary

This release fixes the DevTools OAuth flow for hosted authorization servers by ensuring forwarded headers are scoped correctly to the MCP server origin.

Key Highlights

  • Fixed DevTools OAuth flow against hosted servers (WorkOS, Auth0, Clerk, Stytch)
  • Scoped x-forwarded-* headers to the MCP server origin

Full Release Notes

Fixes the DevTools OAuth flow against a hosted authorization server (WorkOS AuthKit, Auth0, Clerk, Stytch). DevTools sent its `x-forwarded-*` headers on the cross-origin discovery, registration and token requests too, so the browser preflighted them and the flow stopped at `.well-known/openid-configuration`.

## Changes

- fix(devtools): scope forwarded headers to the MCP server origin @muralx (#1024)

Related Repositories