Gustavo Valverde 8a5046b6d5 feat(oauth-provider): apply application_type to metadata document clients ...

Client ID Metadata Documents are the registration mechanism the MCP
2026-07-28 spec recommends, and dynamic client registration the one it
deprecates, but the `application_type` redirect URI constraint reached only
the deprecated path: the field was dropped by the metadata document
allowlist before validation ran.

`type` and `application_type` both describe the client profile, so a
registration sending both must keep them consistent. Cite RFC 8252 for the
native redirect URI rule actually enforced; OIDC Registration predates
claimed https links and does not permit them.

2026-07-28 19:16:41 -04:00

..

blogs

chore(sync): merge main into next

2026-07-22 10:39:55 -04:00

changelogs

chore(docs): format markdown including mdx files (#9085)

2026-04-10 05:09:33 +00:00

docs

feat(oauth-provider): apply application_type to metadata document clients

2026-07-28 19:16:41 -04:00

docs-beta

docs: add stable/beta versioning with build-time content sync (#9258)

2026-04-21 03:49:33 +00:00