From bfc748a925aced6329b1a2b70a14a5e62553d613 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Tailland?= Date: Sat, 29 Aug 2026 07:53:00 +0200 Subject: [PATCH] refactor: request the neutrally-named token-exchange broker Follows the rename in the realm. The client that performs the on-behalf-of exchange is no longer named after the middleware that calls it. Co-Authored-By: Claude Opus 5 --- k8s/librechat/configmap-app.yaml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/k8s/librechat/configmap-app.yaml b/k8s/librechat/configmap-app.yaml index 4db6202..816ec9c 100644 --- a/k8s/librechat/configmap-app.yaml +++ b/k8s/librechat/configmap-app.yaml @@ -24,7 +24,7 @@ data: client_id: librechat client_secret: '${LIBRECHAT_OIDC_CLIENT_SECRET}' redirect_uri: https://librechat.sttlab.local/api/mcp/catalog-mcp/oauth/callback - scope: 'openid mcp-catalog-audience kong-token-exchange-broker-audience' + scope: 'openid mcp-catalog-audience token-exchange-broker-audience' grant_types_supported: ['authorization_code', 'refresh_token'] token_endpoint_auth_methods_supported: ['client_secret_post'] customers-mcp: @@ -36,7 +36,7 @@ data: client_id: librechat client_secret: '${LIBRECHAT_OIDC_CLIENT_SECRET}' redirect_uri: https://librechat.sttlab.local/api/mcp/customers-mcp/oauth/callback - scope: 'openid mcp-customers-audience kong-token-exchange-broker-audience' + scope: 'openid mcp-customers-audience token-exchange-broker-audience' grant_types_supported: ['authorization_code', 'refresh_token'] token_endpoint_auth_methods_supported: ['client_secret_post'] payments-mcp: @@ -48,7 +48,7 @@ data: client_id: librechat client_secret: '${LIBRECHAT_OIDC_CLIENT_SECRET}' redirect_uri: https://librechat.sttlab.local/api/mcp/payments-mcp/oauth/callback - scope: 'openid mcp-payments-audience kong-token-exchange-broker-audience' + scope: 'openid mcp-payments-audience token-exchange-broker-audience' grant_types_supported: ['authorization_code', 'refresh_token'] token_endpoint_auth_methods_supported: ['client_secret_post'] sales-mcp: @@ -60,7 +60,7 @@ data: client_id: librechat client_secret: '${LIBRECHAT_OIDC_CLIENT_SECRET}' redirect_uri: https://librechat.sttlab.local/api/mcp/sales-mcp/oauth/callback - scope: 'openid mcp-sales-audience kong-token-exchange-broker-audience' + scope: 'openid mcp-sales-audience token-exchange-broker-audience' grant_types_supported: ['authorization_code', 'refresh_token'] token_endpoint_auth_methods_supported: ['client_secret_post'] workforce-mcp: @@ -72,7 +72,7 @@ data: client_id: librechat client_secret: '${LIBRECHAT_OIDC_CLIENT_SECRET}' redirect_uri: https://librechat.sttlab.local/api/mcp/workforce-mcp/oauth/callback - scope: 'openid mcp-workforce-audience kong-token-exchange-broker-audience' + scope: 'openid mcp-workforce-audience token-exchange-broker-audience' grant_types_supported: ['authorization_code', 'refresh_token'] token_endpoint_auth_methods_supported: ['client_secret_post'] endpoints: