v1.3.5

skeletonlabs/skeletonv1.3.5Aug 7, 2026by harijoe

Upgrading?

AI Summary

A maintenance release fixing a DevTools OAuth flow issue where cross-origin discovery requests were failing due to incorrect header forwarding.

Key Highlights

  • Fixes DevTools OAuth flow for hosted authorization servers (WorkOS, Auth0, Clerk, Stytch).
  • Resolves browser preflight errors caused by `x-forwarded-*` headers being sent on discovery endpoints.

Full Release Notes

Fixes the DevTools OAuth flow against a hosted authorization server (WorkOS AuthKit, Auth0, Clerk, Stytch). DevTools sent its `x-forwarded-*` headers on the cross-origin discovery, registration and token requests too, so the browser preflighted them and the flow stopped at `.well-known/openid-configuration`.

## Changes

- fix(devtools): scope forwarded headers to the MCP server origin @muralx (#1024)

Related Repositories