stacklok / toolhive / 20302990992

51%

push

github

fix(oauth): include refresh_token grant type in DCR requests (#3076)

Add refresh_token grant type to DCR requests

When ToolHive dynamically registers OAuth clients (RFC 7591), it only
requests the authorization_code grant type. This causes token refresh
to fail after the initial access token expires because the OAuth server
rejects refresh token requests.

This fix adds refresh_token to the grant_types array in the DCR request,
allowing long-running MCP sessions to refresh their tokens automatically.

Closes #3078

Signed-off-by: Frederic Le Feurmou <fredericlefeurmou@gmail.com>
Co-authored-by: Frédéric LE FEURMOU <fredericlefeurmou@users.noreply.github.com>

2 of 2 new or added lines in 1 file covered. (100.0%)

27909 of 55564 relevant lines covered (50.23%)

56.97 hits per line