What's New in v2.0.19
Confidential OAuth Application Support
Added support for Confidential OAuth applications with client_secret.
New Environment Variable
GITLAB_OAUTH_CLIENT_SECRET: Required only for Confidential OAuth apps
OAuth Types
| Type | Secret | Recommended For |
|---|---|---|
| Non-Confidential | Not needed | Desktop/CLI apps (per RFC 8252) |
| Confidential | Required | Server environments |
Documentation Updates
- Enhanced VS Code
.vscode/mcp.jsonexamples (OAuth + PAT) - Updated Docker section (PAT recommended for containers)
- Added Confidential vs Non-Confidential comparison
- RFC 8252 reference for security best practices
Files Changed
oauth.ts:clientSecretsupport in token exchange/refresh.env.example: OAuth configuration sectionREADME.md: Updated examplesdocs/oauth-setup.md: Enhanced setup guide