Search results

claude.ai refreshes ~1s after the code exchange — default refresh_token nbf (+29min) breaks MCP connectors and can trip reuse-detection

Status: Open.

#1647 In sebadob/rauthy;

· impuls42 opened on Jul 16, 2026

client_credentials tokens emit "sub": null — RFC 7519 requires StringOrURI; PyJWT-based resource servers (all FastMCP MCP servers) reject them

Status: Open.

#1646 In sebadob/rauthy;

· impuls42 opened on Jul 16, 2026

RFC 8707: resource is dropped on /oidc/authorize/refresh (LoginRefreshRequest has no resource field) — audience binding breaks for returning users

Status: Open.

#1645 In sebadob/rauthy;

· impuls42 opened on Jul 16, 2026

claude.ai's CIMD document is rejected: grant_types validation has no urn:ietf:params:oauth:grant-type:jwt-bearer (DCR + ephemeral paths)

Status: Open.

#1644 In sebadob/rauthy;

· impuls42 opened on Jul 16, 2026

RFC 8414: metadata URL for a path-ful issuer (/.well-known/oauth-authorization-server/auth/v1) 301s to the SPA — claude.ai can't discover CIMD

Status: Open.

#1643 In sebadob/rauthy;

· impuls42 opened on Jul 16, 2026

Make lifetime configuration more self-documenting by adding units

enhancementNew feature or requestNew feature or request

Status: Open.

#1642 In sebadob/rauthy;

· ruuda opened on Jul 16, 2026

RFC 9068: emit at+jwt typ header on access tokens

Status: Open.

#1641 In sebadob/rauthy;

· bartekus opened on Jul 16, 2026

RFC 8693 OAuth 2.0 Token Exchange

Status: Open.

#1639 In sebadob/rauthy;

· bartekus opened on Jul 15, 2026

Docs tab should include a link to a public Swagger instance

enhancementNew feature or requestNew feature or request

Status: Open.

#1638 In sebadob/rauthy;

· disconn3ct opened on Jul 13, 2026

Allow missing config.toml

enhancementNew feature or requestNew feature or request

Status: Open.

#1637 In sebadob/rauthy;

· disconn3ct opened on Jul 12, 2026

UX: session not upgraded after passkey registration — admin UI forces a logout/login round-trip

Status: Open.

#1636 In sebadob/rauthy;

· CognitiveSand opened on Jul 11, 2026

Return a proper HTTP answer when api keys are invalid

enhancementNew feature or requestNew feature or request

Status: Open.

#1635 In sebadob/rauthy;

· m0ppers opened on Jul 9, 2026