mirror of
https://github.com/danny-avila/LibreChat.git
synced 2026-11-12 09:45:47 +00:00
a0f063b1c7
* fix: Fence ACL Viewers and Surface Revocation Failures When Removing Shared MCP Servers Account erasure and server deletion now enumerate users the view ACL names directly or through a group, so viewers without a personal OAuth token are fenced and disconnected too. Erasure runs the OAuth teardown in strict mode, which clears local credentials and then fails when the provider refuses a revocation, keeping the server as the retry anchor, and holds every user's teardown fence until the server delete commits. * test: Type the Revocation Failure Cleanup Fixtures * fix: Renew Retained OAuth Teardown Fences Before Deleting the Server A teardown lease lasts 15 minutes, so a large erasure could outlive the first fences it holds. Leases can now be renewed by their owner, and erasure renews every retained fence right before the delete, failing without deleting when one lapsed and another writer took it. * fix: Report Refused MCP Revocations Without Blocking Account Erasure A provider that refuses revocation, combined with a viewer who signs in again between attempts, could keep an erasure failing indefinitely. The strict teardown now throws a coded MCPOAuthRevocationError after clearing local state and handing over its fence; server removal collects those as refusals, logs each user and token type whose grant may remain valid, and proceeds. Local failures (token delete, fence, ACL) still fail closed. * fix: Annotate the Revocation Error Code for Isolated Declarations |
||
|---|---|---|
| .. | ||
| deleteUser.spec.js | ||
| deleteUserMcpServers.spec.js | ||
| deleteUserResourceCoverage.spec.js | ||
| maybeUninstallOAuthMCP.spec.js | ||
| mcp.servers.spec.js | ||
| PermissionsController.spec.js | ||
| tools.callTool.contentFilter.spec.js | ||
| tools.verifyToolAuth.spec.js | ||
| TwoFactorController.spec.js | ||
| UserController.mcpOAuth.spec.js | ||