anomalyco/opencode
1
0
Fork 0
mirror of https://github.com/anomalyco/opencode.git synced 2026-07-22 18:25:32 -04:00
Code Issues 5.9k Packages Projects Releases 19 Wiki Activity

OAuth: client_credentials configuration results in authorization_code flow #4420

New Issue
Open
opened 2026-02-16 17:43:44 -05:00 by yindo · 1 comment
yindo commented 2026-02-16 17:43:44 -05:00
Owner
Copy Link
Copy Source

Originally created by @thaoula on GitHub (Jan 8, 2026).

Originally assigned to: @thdxr on GitHub.

Description

Hi Team,

According to you docs we should be able to connect MCP's using pre-registered clients -
https://opencode.ai/docs/mcp-servers/#pre-registered

I have applied the following configuration

"saas-context": {
      "type": "remote",
      "url": "https://sass/mcp/context",
      "enabled": true,
      "oauth": {
        "clientId": "CLIENT_ID",
        "clientSecret": "CLIENT_SECRET",
        "scope": "jobs:read"
      }
    }

The requests appear to be going here -

Path Excluded: /public/public-api/mcp/context
Path Excluded: /.well-known/oauth-protected-resource/api/mcp/context
Path Excluded: /.well-known/oauth-protected-resource
Path Excluded: /.well-known/oauth-authorization-server/api/mcp/context
Path Excluded: /.well-known/oauth-authorization-server
Path Excluded: /oauth2/authorize

This opens a browser to do a authorization_code flow but it should do client_credential flow because clientId and clientSecret is provided.

Regards,
Tarek

Plugins

No response

OpenCode version

1.1.6

Steps to reproduce

No response

Screenshot and/or share link

No response

Operating System

macOS 26

Terminal

vscode

Originally created by @thaoula on GitHub (Jan 8, 2026). Originally assigned to: @thdxr on GitHub. ### Description Hi Team, According to you docs we should be able to connect MCP's using pre-registered clients - https://opencode.ai/docs/mcp-servers/#pre-registered I have applied the following configuration ``` "saas-context": { "type": "remote", "url": "https://sass/mcp/context", "enabled": true, "oauth": { "clientId": "CLIENT_ID", "clientSecret": "CLIENT_SECRET", "scope": "jobs:read" } } ``` The requests appear to be going here - ``` Path Excluded: /public/public-api/mcp/context Path Excluded: /.well-known/oauth-protected-resource/api/mcp/context Path Excluded: /.well-known/oauth-protected-resource Path Excluded: /.well-known/oauth-authorization-server/api/mcp/context Path Excluded: /.well-known/oauth-authorization-server Path Excluded: /oauth2/authorize ``` This opens a browser to do a authorization_code flow but it should do client_credential flow because clientId and clientSecret is provided. Regards, Tarek ### Plugins _No response_ ### OpenCode version 1.1.6 ### Steps to reproduce _No response_ ### Screenshot and/or share link _No response_ ### Operating System macOS 26 ### Terminal vscode
yindo added the bugdocs labels 2026-02-16 17:43:44 -05:00
yindo commented 2026-02-16 17:43:44 -05:00
Author
Owner
Copy Link
Copy Source

@github-actions[bot] commented on GitHub (Jan 8, 2026):

This issue might be related to existing OAuth/MCP authentication issues. Please check:

  • #5444: MCP with oauth doesn't work - discusses OAuth configuration issues with MCP servers
  • #5953: Reauthentication with Jira MCP via Oauth doesn't work - related to MCP OAuth flow problems
  • #5766: OAuth uses wrong authorization URL and missing redirectUri config - discusses OAuth flow implementation issues with enterprise auth servers

The core issue here is that when clientId and clientSecret are provided, the client_credentials OAuth flow should be used instead of the authorization_code flow. These related issues may contain useful context about MCP OAuth handling.

Feel free to ignore if your specific case differs from these issues.

@github-actions[bot] commented on GitHub (Jan 8, 2026): This issue might be related to existing OAuth/MCP authentication issues. Please check: - #5444: MCP with oauth doesn't work - discusses OAuth configuration issues with MCP servers - #5953: Reauthentication with Jira MCP via Oauth doesn't work - related to MCP OAuth flow problems - #5766: OAuth uses wrong authorization URL and missing redirectUri config - discusses OAuth flow implementation issues with enterprise auth servers The core issue here is that when `clientId` and `clientSecret` are provided, the client_credentials OAuth flow should be used instead of the authorization_code flow. These related issues may contain useful context about MCP OAuth handling. Feel free to ignore if your specific case differs from these issues.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
acp
bad
bug
discussion
docs
documentation
enhancement
extension
good first issue
growth
help-wanted
mcp
model-problem
needs:compliance
nix
opentui
perf
pull-request
Mirrored from GitHub Pull Request
 tui
web
windows
zen
No Label bug docs
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#4420
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?