mirrors/hermes-agent
1
0
Fork 0
mirror of https://github.com/NousResearch/hermes-agent.git synced 2026-07-31 19:16:29 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

fix(mcp): serialize hosted oauth reauthorization

Browse source
This commit is contained in:
Ben Barclay 2026-07-17 14:00:09 +10:00 • committed by Teknium
parent b09f1ba770
commit 11eaa77daf
4 changed files with 56 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

23
tests/hermes_cli/test_mcp_dashboard_oauth.py
View file

@ -159,6 +159,29 @@ def test_hosted_auth_start_bounds_pending_flow_registry():
assert response.status_code == 429
def test_hosted_auth_rejects_overlapping_flow_for_same_server():
from hermes_cli import web_server
from tools.mcp_dashboard_oauth import DashboardOAuthFlow
client = _client()
client.post(
"/api/mcp/servers",
json={"name": "reports", "url": "https://mcp.example/mcp", "auth": "oauth"},
)
existing = DashboardOAuthFlow(
flow_id="existing-reports",
server_name="reports",
profile="other-profile",
redirect_uri="https://agent.example/callback/existing",
)
web_server._mcp_oauth_flows[existing.flow_id] = existing
response = client.post("/api/mcp/servers/reports/auth")
assert response.status_code == 409
assert "already in progress" in response.text
def test_flow_status_does_not_expose_authorization_code():
from hermes_cli import web_server
from tools.mcp_dashboard_oauth import DashboardOAuthFlow