LibreChat/api/server/services
J.C. Bartle 164ebaf09d 🌉 Persist OIDC refresh-token recovery bridges in MongoDB
Store SSE OBO refresh-token recovery bridges in MongoDB instead of
process-local memory so /api/auth/refresh can recover after worker
restarts or cross-worker routing.

Derive bridge expiry from REFRESH_TOKEN_EXPIRY so the recovery window
matches the stale refreshToken cookie it repairs, and delete bridges
after successful recovery.
2026-06-23 17:19:57 -04:00
..
__tests__ 🛂 fix: Re-Check execute_code Authorization on Event-Driven Tool Loads (#13912) 2026-06-23 08:30:39 -04:00
Artifacts 🪡 fix: Artifact Edit Saves (#13358) 2026-05-27 22:03:42 -07:00
Config 📨 feat: Custom Headers on Built-in Provider Endpoints (#13742) 2026-06-14 17:02:04 -04:00
Endpoints 💸 feat: Per-Agent Endpoint Token Config in Multi-Endpoint Billing (#13738) 2026-06-14 12:00:32 -04:00
Files 🌐 fix: Centralize Outbound Proxy Handling (#13726) 2026-06-14 10:47:49 -04:00
Runs
Skills 🧬 feat: Add GitHub Skill Sync (#13293) 2026-06-10 21:05:54 -04:00
start
Threads 🪪 fix: Scope Message Conversation Access (#13183) 2026-05-18 17:34:30 -04:00
Tools ♻️ refactor: Pass OBO upstream-token closure into MCP instead of req 2026-06-23 11:59:01 -04:00
ActionService.js fix: Extend and Decouple MCP OAuth Flow Timeouts (#13622) 2026-06-09 17:50:02 -04:00
ActionService.spec.js
AssistantService.js
AuthService.js ♻️ refactor: Pass OBO upstream-token closure into MCP instead of req 2026-06-23 11:59:01 -04:00
AuthService.spec.js ♻️ refactor: Pass OBO upstream-token closure into MCP instead of req 2026-06-23 11:59:01 -04:00
cleanup.js
createRunBody.js
GraphApiService.js
GraphApiService.spec.js
GraphTokenService.js 🔒 feat: Add On-Behalf-Of (OBO) token exchange support for MCP Servers (#13429) 2026-06-01 22:36:18 -04:00
initializeMCPs.js 🔐 fix: Honor Admin-Panel MCP Allowlist Overrides Without Restart (#13814) 2026-06-17 20:14:53 -04:00
initializeMCPs.spec.js 🔐 fix: Honor Admin-Panel MCP Allowlist Overrides Without Restart (#13814) 2026-06-17 20:14:53 -04:00
initializeOAuthReconnectManager.js
MCP.js ♻️ refactor: Pass OBO upstream-token closure into MCP instead of req 2026-06-23 11:59:01 -04:00
MCP.spec.js ♻️ refactor: Pass OBO upstream-token closure into MCP instead of req 2026-06-23 11:59:01 -04:00
MCPRequestContext.js 🪢 fix: Tie MCP Cleanup To Resumable Runs (#13769) 2026-06-15 15:26:03 -04:00
OboPolicyService.js 🔒 feat: Add On-Behalf-Of (OBO) token exchange support for MCP Servers (#13429) 2026-06-01 22:36:18 -04:00
OboTokenService.js 🔒 feat: Add On-Behalf-Of (OBO) token exchange support for MCP Servers (#13429) 2026-06-01 22:36:18 -04:00
OboTokenService.spec.js 🔒 feat: Add On-Behalf-Of (OBO) token exchange support for MCP Servers (#13429) 2026-06-01 22:36:18 -04:00
OpenIDSessionRefresh.js 🔨 fix: hydrate joined OIDC refresh sessions with stable refresh tokens 2026-06-23 14:10:39 -04:00
OpenIDSessionRefresh.spec.js 🔨 fix: hydrate joined OIDC refresh sessions with stable refresh tokens 2026-06-23 14:10:39 -04:00
PermissionService.js 🪪 fix: Filter ACL Principal Details (#13524) 2026-06-05 19:06:41 -04:00
PermissionService.spec.js 🪪 fix: Filter ACL Principal Details (#13524) 2026-06-05 19:06:41 -04:00
PluginService.js
RefreshTokenBridge.js 🌉 Persist OIDC refresh-token recovery bridges in MongoDB 2026-06-23 17:19:57 -04:00
RefreshTokenBridge.spec.js 🌉 Persist OIDC refresh-token recovery bridges in MongoDB 2026-06-23 17:19:57 -04:00
systemGrant.spec.js
ToolService.js Merge branch 'main' into fix/feature/obo 2026-06-23 12:41:09 -04:00
twoFactorService.js