Alex Kotliarskyi 0650d6d1ca Preserve MCP authentication challenges on tool calls (#42552) ...

## Why

When silent OAuth refresh cannot recover a rejected MCP tool call, the caller
needs the server's authentication challenge to initiate interactive login. The
rejected call must not be replayed automatically after refresh has failed.

## What changed

- Convert `401 Unauthorized` responses with `WWW-Authenticate` headers into an
  MCP tool error containing `mcp/www_authenticate` metadata.
- Preserve multiple authentication challenges by combining all
  `WWW-Authenticate` header values.
- Keep successful silent refresh behavior while avoiding replay when refresh
  fails.

## Testing

Added coverage for successful and failed refresh, multiple authentication
headers, propagation through agent tool-call events, and no-replay behavior.

GitOrigin-RevId: c560cff6286d7ab09b1f5c6cf3618d4650cde47d

2026-09-03 15:12:02 +00:00

..

bin

Refresh MCP HTTP helper headers after authorization failures (#41400)

2026-08-28 19:29:51 +00:00

oauth

Enable coordinated MCP OAuth refresh (#42413)

2026-09-03 02:00:12 +00:00

auth_status.rs

Harden MCP OAuth callback handling (#40691)

2026-08-25 20:26:23 +00:00

bounded_stdio_transport.rs

Fix relative MCP server spawning on macOS (#42117)

2026-09-01 18:53:06 +00:00

elicitation_client_service.rs

Support openai/elicitation form requests (#41447)

2026-08-29 02:43:10 +00:00

ema_auth_policy_tests.rs

Add enterprise IdP identity resolution for MCP OAuth (#40739)

2026-08-25 23:51:57 +00:00

ema_auth_policy.rs

Add enterprise IdP identity resolution for MCP OAuth (#40739)

2026-08-25 23:51:57 +00:00

ema_claims.rs

Add enterprise IdP identity resolution for MCP OAuth (#40739)

2026-08-25 23:51:57 +00:00

ema_exchange_tests.rs

Add enterprise IdP identity resolution for MCP OAuth (#40739)

2026-08-25 23:51:57 +00:00

ema_exchange.rs

Add enterprise ID-JAG exchange for MCP OAuth (#40722)

2026-08-25 22:12:41 +00:00

ema_identity_tests.rs

Add enterprise IdP identity resolution for MCP OAuth (#40739)

2026-08-25 23:51:57 +00:00

ema_identity.rs

Add enterprise IdP identity resolution for MCP OAuth (#40739)

2026-08-25 23:51:57 +00:00

event_notification_transport.rs

Add app-server MCP event streaming (#39761)

2026-08-20 17:49:35 +00:00

executor_process_transport_tests.rs

Complete MCP 2026 client support (#35725)

2026-07-28 06:06:58 +00:00

executor_process_transport.rs

Update rmcp to 3.1.2 (#39101)

2026-08-17 23:04:09 +00:00

http_client_adapter_tests.rs

Resolve HTTP MCP bearer tokens in executor environments (#39926)

2026-08-21 12:50:15 +00:00

http_client_adapter.rs

Preserve MCP authentication challenges on tool calls (#42552)

2026-09-03 15:12:02 +00:00

http_client_redirect_tests.rs

Resolve HTTP MCP bearer tokens in executor environments (#39926)

2026-08-21 12:50:15 +00:00

http_client_redirect.rs

Resolve HTTP MCP bearer tokens in executor environments (#39926)

2026-08-21 12:50:15 +00:00

http_headers_tests.rs

Refresh MCP HTTP helper headers after authorization failures (#41400)

2026-08-28 19:29:51 +00:00

http_headers.rs

Refresh MCP HTTP helper headers after authorization failures (#41400)

2026-08-28 19:29:51 +00:00

in_process_transport.rs

feat: make built-in MCPs first-class runtime servers (#21356)

2026-05-07 10:36:32 +02:00

lib.rs

Prepare MCP connections for coordinated OAuth refresh (#42128)

2026-09-01 20:26:57 +00:00

local_child.rs

Fix relative MCP server spawning on macOS (#42117)

2026-09-01 18:53:06 +00:00

local_stdio_transport.rs

Fix relative MCP server spawning on macOS (#42117)

2026-09-01 18:53:06 +00:00

logging_client_handler.rs

Upgrade rmcp to 3.0.0-beta.3 (#35720)

2026-07-28 05:17:25 +00:00

macos_stdio_tests.rs

Use native spawning for bare macOS MCP commands (#42192)

2026-09-02 03:24:43 +00:00

macos_stdio.rs

Use native spawning for bare macOS MCP commands (#42192)

2026-09-02 03:24:43 +00:00

oauth_callback_tests.rs

Harden MCP OAuth callback handling (#40691)

2026-08-25 20:26:23 +00:00

oauth_callback.rs

Harden MCP OAuth callback handling (#40691)

2026-08-25 20:26:23 +00:00

oauth_client_registration_tests.rs

Harden MCP OAuth callback handling (#40691)

2026-08-25 20:26:23 +00:00

oauth_client_registration.rs

Harden MCP OAuth callback handling (#40691)

2026-08-25 20:26:23 +00:00

oauth_http_client_security_tests.rs

Isolate MCP resource headers during OAuth requests (#39019)

2026-08-17 16:29:47 +00:00

oauth_http_client.rs

Enable coordinated MCP OAuth refresh (#42413)

2026-09-03 02:00:12 +00:00

oauth_refresh_mode.rs

Prepare MCP connections for coordinated OAuth refresh (#42128)

2026-09-01 20:26:57 +00:00

oauth.rs

Enable coordinated MCP OAuth refresh (#42413)

2026-09-03 02:00:12 +00:00

perform_oauth_login.rs

Enable coordinated MCP OAuth refresh (#42413)

2026-09-03 02:00:12 +00:00

program_resolver.rs

Propagate custom CA settings to local MCP servers (#38040)

2026-08-11 17:24:04 +00:00

protocol_mode.rs

Add MCP 2026-07-28 discovery support (#35724)

2026-07-28 05:52:12 +00:00

rmcp_client.rs

Preserve MCP authentication challenges on tool calls (#42552)

2026-09-03 15:12:02 +00:00

service_error.rs

Improve sandboxing, MCP errors, and cached approvals (#41196)

2026-08-27 20:05:08 +00:00

startup_error.rs

Update rmcp to 3.1.3 (#39798)

2026-08-20 20:53:17 +00:00

stdio_server_launcher.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

streamable_http_retry_tests.rs

Recover MCP servers after OAuth reauthentication (#37337)

2026-08-07 00:17:46 +00:00

streamable_http_retry.rs

Enable coordinated MCP OAuth refresh (#42413)

2026-09-03 02:00:12 +00:00

utils.rs

Isolate MCP resource headers during OAuth requests (#39019)

2026-08-17 16:29:47 +00:00

www_authenticate_tests.rs

Refresh MCP HTTP helper headers after authorization failures (#41400)

2026-08-28 19:29:51 +00:00

www_authenticate.rs

Refresh MCP HTTP helper headers after authorization failures (#41400)

2026-08-28 19:29:51 +00:00