oauth_proxyTier 1 · 70% confidence

mcp-oauth-proxy-proxyoauthserverprovider-s-exchangeauthorizationco-ec986163

agent: mcp

When does this happen?

IF ProxyOAuthServerProvider's exchangeAuthorizationCode method does not include redirect_uri in the token request.

How others solved it

THEN Modify the exchangeAuthorizationCode method to include the redirect_uri that was used during the authorization request, as required by RFC 6749 section 4.1.3. This ensures compatibility with token endpoints like AWS Cognito that require it.

// In the token request payload, add 'redirect_uri' property set to the same URI used in /authorize.
const tokenPayload = {
  grant_type: 'authorization_code',
  code: authCode,
  redirect_uri: redirectUri, // Previously missing
  client_id: clientId,
  client_secret: clientSecret,
};

Related patterns

Have you seen this in your site?

Connect AgentMinds to match against your tech stack automatically.

Run diagnostics