Skip to content

When using Streamable HTTP transport, the oauth flow is not triggered when the server returns 401 #358

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
ashubham opened this issue Apr 29, 2025 · 0 comments
Labels
authorization Issues related to authentication bug Something isn't working

Comments

@ashubham
Copy link

ashubham commented Apr 29, 2025

Describe the bug
When using Streamable HTTP transport, the oauth flow is not triggered when the server returns 401. The sse transport supports this and the browser correctly initiates the oauth flow as per the spec.

To Reproduce
Steps to reproduce the behavior:

  1. Point against an MCP server with Streamable HTTP + Oauth flow. Like this one (https://thoughtspot-mcp-server.thoughtspot-485.workers.dev/mcp)

Expected behavior
When the server returns 401 the inspector should trigger the oauth flow.

Logs
When using streamable HTTP:

Created streamable web app transport 9b453c43-3a2c-4e67-a18f-29824475847e
Error from MCP server: Error: Error POSTing to endpoint (HTTP 401)
-- the inspector hangs here --

When using sse:

SSE transport: url=<server sse endpoint>, headers=Accept
Received 401 Unauthorized from MCP server: SSE error: Non-200 status code (401)
-- the oauth flow is triggered ---

Additional context
There is discussion on this in #339, and is identified as a follow up task.

@ashubham ashubham added the bug Something isn't working label Apr 29, 2025
@olaservo olaservo added the authorization Issues related to authentication label Apr 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
authorization Issues related to authentication bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants