Ettore Di Giacinto
180822c546
fix(mcp): require https for the oauth2 token_url
...
The client secret is sent to token_url, so a plain http endpoint would
expose it. Reject non-https URLs except for loopback hosts, which keeps
local identity providers and tests working. Document the restriction,
recommend client_secret_env over a literal secret, and note that rotating
a *_env secret needs a restart because sessions and cached tokens are
keyed by configuration, not by the environment value.
Assisted-by: Claude Code:claude-sonnet-5-5
Signed-off-by: Ettore Di Giacinto <mudler@localai.io >
2026-10-13 08:08:43 +00:00
..
2026-08-02 09:23:26 +02:00
2026-09-22 07:06:32 +00:00
2026-09-18 06:12:03 +01:00
2026-07-17 22:08:20 +02:00
2026-10-08 22:03:07 +02:00
2026-10-07 22:03:48 +02:00
2026-10-07 14:10:45 +02:00
2026-10-12 09:35:25 +02:00
2026-10-07 14:10:45 +02:00
2026-10-07 16:57:23 +02:00
2026-08-18 09:03:16 +02:00
2026-10-08 22:03:07 +02:00
2026-10-08 22:03:07 +02:00
2026-09-13 19:06:43 +02:00
2026-10-08 22:03:07 +02:00
2026-08-03 18:03:46 +02:00
2026-08-18 11:31:03 +00:00
2026-10-10 08:29:31 +02:00
2026-10-11 00:26:40 +02:00
2026-10-08 22:03:07 +02:00
2026-10-08 22:03:07 +02:00
2026-08-18 09:37:43 +02:00
2026-10-08 22:03:07 +02:00
2026-10-08 22:03:07 +02:00
2026-07-17 22:08:20 +02:00
2026-09-28 08:33:15 +02:00
2026-10-11 00:30:09 +02:00
2026-07-17 22:08:20 +02:00
2026-10-08 22:03:07 +02:00
2026-10-13 08:08:43 +00:00
2026-07-17 22:08:20 +02:00
2026-09-27 07:42:20 +00:00
2026-10-08 22:03:07 +02:00
2026-10-09 10:16:11 +02:00
2026-08-03 18:03:46 +02:00
2026-09-13 01:51:19 +02:00
2026-07-21 09:40:10 +02:00
2026-09-13 19:05:33 +02:00
2026-10-08 22:03:07 +02:00
2026-10-08 22:03:07 +02:00
2026-07-17 22:08:20 +02:00
2026-09-11 21:49:51 +00:00
2026-10-08 22:03:07 +02:00
2026-07-29 20:12:29 +02:00
2026-10-08 22:03:07 +02:00
2026-08-02 09:23:26 +02:00
2026-10-12 09:35:15 +02:00
2026-10-12 18:49:17 +02:00
2026-10-08 22:03:07 +02:00
2026-09-11 21:52:41 +00:00
2026-09-30 20:22:49 +02:00
2026-10-05 15:57:16 +02:00
2026-10-08 22:03:07 +02:00
2026-09-11 21:48:07 +00:00