What's Changed
- Limit OAuth requests to HTTP and HTTPS and cap response size by @pushpak1300 in #380
- Show the redirect URI on the OAuth authorize page by @pushpak1300 in #377
- Prevent the OAuth authorize page from being framed by default by @pushpak1300 in #376
- Allow MCP Apps without a ui.domain by @nbullorini in #381
- Check resolved addresses of OAuth discovery hosts by @pushpak1300 in #378
New Contributors
- @nbullorini made their first contribution in #381
Full Changelog: v1.1.1...v1.1.2