v9.2.2

spider-rs/spiderv9.2.2Aug 23, 2026by github-actions[bot]

Upgrading?

AI Summary

A security and UX patch restoring native authentication prompts for the UI and REST API.

Key Highlights

  • Scopes OAuth middleware specifically to the `/mcp` transport
  • Restores browser Basic Auth prompts for UI, REST API, and favicon

Full Release Notes

## What's New in v9.2.2

šŸ” **Basic Auth Prompt Restored with MCP OAuth Enabled**

Version 9.2.2 is a focused patch release that restores the browser Basic Auth prompt for the UI and REST API when MCP OAuth 2.1 is enabled. OAuth and Basic authentication for the MCP endpoint continue to work as before.

---

## šŸ› Bug Fixes

### OAuth Middleware Scoped to MCP
- Limits the OAuth-or-Basic authentication challenge to the `/mcp` transport instead of intercepting unrelated routes registered later
- Restores the standard Basic Auth challenge for the UI, REST API, and favicon requests, allowing browsers to display their native credential prompt
- Preserves both OAuth Bearer token and existing Basic Auth access to MCP
- Adds regression coverage for root deployments and installations using `APP_BASE_PATH`

---

## What's Changed
* fix(auth): scope OAuth middleware to MCP by @aldinokemal
* chore(release): update `AppVersion` to `v9.2.2` by @aldinokemal

## Contributors
- [@aldinokemal](https://github.com/aldinokemal)

**Full Changelog**: https://github.com/aldinokemal/go-whatsapp-web-multidevice/compare/v9.2.1...v9.2.2

Related Repositories