stt/infra-librechat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor: request the neutrally-named token-exchange broker

Browse Source 
Follows the rename in the realm. The client that performs the on-behalf-of
exchange is no longer named after the middleware that calls it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
Stéphane Tailland
2026-08-29 07:53:00 +02:00
parent 7892f0f8f5
commit bfc748a925
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8s/librechat/configmap-app.yaml
+5 -5
View File
@@ -24,7 +24,7 @@ data:
client_id: librechat client_id: librechat
client_secret: '${LIBRECHAT_OIDC_CLIENT_SECRET}' client_secret: '${LIBRECHAT_OIDC_CLIENT_SECRET}'
redirect_uri: https://librechat.sttlab.local/api/mcp/catalog-mcp/oauth/callback redirect_uri: https://librechat.sttlab.local/api/mcp/catalog-mcp/oauth/callback
scope: 'openid mcp-catalog-audience kong-token-exchange-broker-audience' scope: 'openid mcp-catalog-audience token-exchange-broker-audience'
grant_types_supported: ['authorization_code', 'refresh_token'] grant_types_supported: ['authorization_code', 'refresh_token']
token_endpoint_auth_methods_supported: ['client_secret_post'] token_endpoint_auth_methods_supported: ['client_secret_post']
customers-mcp: customers-mcp:
@@ -36,7 +36,7 @@ data:
client_id: librechat client_id: librechat
client_secret: '${LIBRECHAT_OIDC_CLIENT_SECRET}' client_secret: '${LIBRECHAT_OIDC_CLIENT_SECRET}'
redirect_uri: https://librechat.sttlab.local/api/mcp/customers-mcp/oauth/callback redirect_uri: https://librechat.sttlab.local/api/mcp/customers-mcp/oauth/callback
scope: 'openid mcp-customers-audience kong-token-exchange-broker-audience' scope: 'openid mcp-customers-audience token-exchange-broker-audience'
grant_types_supported: ['authorization_code', 'refresh_token'] grant_types_supported: ['authorization_code', 'refresh_token']
token_endpoint_auth_methods_supported: ['client_secret_post'] token_endpoint_auth_methods_supported: ['client_secret_post']
payments-mcp: payments-mcp:
@@ -48,7 +48,7 @@ data:
client_id: librechat client_id: librechat
client_secret: '${LIBRECHAT_OIDC_CLIENT_SECRET}' client_secret: '${LIBRECHAT_OIDC_CLIENT_SECRET}'
redirect_uri: https://librechat.sttlab.local/api/mcp/payments-mcp/oauth/callback redirect_uri: https://librechat.sttlab.local/api/mcp/payments-mcp/oauth/callback
scope: 'openid mcp-payments-audience kong-token-exchange-broker-audience' scope: 'openid mcp-payments-audience token-exchange-broker-audience'
grant_types_supported: ['authorization_code', 'refresh_token'] grant_types_supported: ['authorization_code', 'refresh_token']
token_endpoint_auth_methods_supported: ['client_secret_post'] token_endpoint_auth_methods_supported: ['client_secret_post']
sales-mcp: sales-mcp:
@@ -60,7 +60,7 @@ data:
client_id: librechat client_id: librechat
client_secret: '${LIBRECHAT_OIDC_CLIENT_SECRET}' client_secret: '${LIBRECHAT_OIDC_CLIENT_SECRET}'
redirect_uri: https://librechat.sttlab.local/api/mcp/sales-mcp/oauth/callback redirect_uri: https://librechat.sttlab.local/api/mcp/sales-mcp/oauth/callback
scope: 'openid mcp-sales-audience kong-token-exchange-broker-audience' scope: 'openid mcp-sales-audience token-exchange-broker-audience'
grant_types_supported: ['authorization_code', 'refresh_token'] grant_types_supported: ['authorization_code', 'refresh_token']
token_endpoint_auth_methods_supported: ['client_secret_post'] token_endpoint_auth_methods_supported: ['client_secret_post']
workforce-mcp: workforce-mcp:
@@ -72,7 +72,7 @@ data:
client_id: librechat client_id: librechat
client_secret: '${LIBRECHAT_OIDC_CLIENT_SECRET}' client_secret: '${LIBRECHAT_OIDC_CLIENT_SECRET}'
redirect_uri: https://librechat.sttlab.local/api/mcp/workforce-mcp/oauth/callback redirect_uri: https://librechat.sttlab.local/api/mcp/workforce-mcp/oauth/callback
scope: 'openid mcp-workforce-audience kong-token-exchange-broker-audience' scope: 'openid mcp-workforce-audience token-exchange-broker-audience'
grant_types_supported: ['authorization_code', 'refresh_token'] grant_types_supported: ['authorization_code', 'refresh_token']
token_endpoint_auth_methods_supported: ['client_secret_post'] token_endpoint_auth_methods_supported: ['client_secret_post']
endpoints: endpoints: