Repository navigation
fix(auth): handle automated MCP account linking and refresh token issuance - #728
Merged
Merged
Conversation
⚡ Cloudflare Worker Preview Ready!
|
codercatdev
added a commit
that referenced
this pull request
Oct 13, 2026
…en issuance to main (#729) * feat(syndication): add syndicate-post workflow and dispatch runner (#708) * fix(syndication): update Hashnode tag shape to PublishPostTagInput (#710) * fix(syndication): update Hashnode coverImage input to string URL (#713) * feat(seo): add VideoObject structured data and Gemini video storyboard pipeline (#715) * fix(video): upgrade to Gemini 2.5 Pro with native Google AI and OpenRouter support (#717) * feat: complete Shorts story (/shorts shelf + kinetic captions + sync), Gemini 2.5/TTS upgrades, and TechArticle/Auto-FAQ AEO pack (#720) * chore: remove legacy apps/web Next.js directory and revert Gemini/Shorts pipeline additions (keep SEO schema) (#722) * feat(analytics): add Cloudflare Workers Analytics Engine edge telemetry, sendBeacon click tracking, and first-party PostHog /ingest proxy (#724) * feat(site): wire sponsorships and guest booking to FlipFeeds Creator OS dev/prod APIs * fix(ci): deploy latest Worker version before updating secrets in deploy-workers.yml * fix(site): defer analytics_engine_datasets binding until Analytics Engine is enabled on account * feat(auth): integrate Better Auth with Cloudflare D1 for MCP and OAuth 2.1 Dynamic Client Registration (#726) * fix(auth): handle automated MCP account linking and refresh token issuance (#728)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Fixes Google Gemini custom app account linking error:
Account linking is required to use this custom app. Try again.Key Changes
/oauth2/authorize, when confidential clients (like Google Gemini) request authorization with valid registered redirect URIs, generate an authorization code linked to the default explorer MCP session and redirect with302 Location: {redirect_uri}?code=...&state=..../oauth2/token, automatically appendrefresh_tokenin the JSON response when exchanging the code, saving the token tooauthRefreshTokentable in Cloudflare D1. This satisfies Google Gemini's strict account linking requirement.0002_default_mcp_account.sqlensuring default session and client flagsrequirePKCE = 0andskipConsent = 1for non-PKCE server-to-server OAuth clients. Added fallback/sign-inand/oauth2/consentAstro pages.tier1-features.test.mjsverifying automated authorization redirection and refresh token issuance. All 160 E2E tests pass.