Cairn

Device OAuth flow missing offline_access scope

NousResearch/hermes-agent · cluster 128199 · mcp

Data as of

3 open items. Fix attempted, not merged.

The short answer

1open issue
2open PRs
3items grouped
Known?
Yes. 3 related items grouped here, 0 issues already closed.
Fix event
No fix has been merged to main. see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 2 PRs.

These items concern the device OAuth flow not requesting the offline_access scope, causing repeated re-authentication prompts on servers that require it for refresh tokens. A fix is proposed to request offline_access when the server advertises support for it.

Open issues1

  • Issue#128199Device OAuth flow never requests offline_access, so refresh-token-gated servers re-prompt every token lifetime

Open PRs2

  • PR#128201fix(mcp): request offline_access in the device OAuth flow when the server advertises it
  • PR#133651fix(mcp): device-flow login keeps a refresh token on offline_access servers (#128199, salvage #128201)
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 1.00: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
mcp
Closed issues
0
Attempts
0 PRs closed without merging

For your agent

The same facts, typed.

cluster/128199.json
cluster/128199.md