Fix QR code login URL missing /device path segment for OIDC+tunnel flow

sharpninja · claude · sharpninja · commit a5307436e99f · 2026-04-04T22:17:15.000-05:00
The QR code encoded .../auth/ui{authorityPath} which points to realm
metadata, not the device verification page. AuthConfigController builds
verification_uri as .../auth/ui{authorityPath}/device, so align the QR
URL to match so mobile scans land on the correct login endpoint.

Co-Authored-By: Claude Sonnet 4.6 &lt;noreply@anthropic.com&gt;
diff --git a/src/McpServer.Support.Mcp/Program.cs b/src/McpServer.Support.Mcp/Program.cs
@@ -766,7 +766,7 @@ await pairingRenderer.RenderLoginPageAsync("Invalid username or password.").Conf
         var authority = oidc.Authority.TrimEnd('/');
         if (Uri.TryCreate(authority, UriKind.Absolute, out var authorityUri))
         {
-            loginUrl = $"{baseUrl}/auth/ui{authorityUri.AbsolutePath}";
+            loginUrl = $"{baseUrl}/auth/ui{authorityUri.AbsolutePath.TrimEnd('/')}/device";
         }
         else
         {

Original file line number	Diff line number	Diff line change
`@@ -766,7 +766,7 @@ await pairingRenderer.RenderLoginPageAsync("Invalid username or password.").Conf`
`766`	`766`	`var authority = oidc.Authority.TrimEnd('/');`
`767`	`767`	`if (Uri.TryCreate(authority, UriKind.Absolute, out var authorityUri))`
`768`	`768`	`{`
`769`		`- loginUrl = $"{baseUrl}/auth/ui{authorityUri.AbsolutePath}";`
	`769`	`+ loginUrl = $"{baseUrl}/auth/ui{authorityUri.AbsolutePath.TrimEnd('/')}/device";`
`770`	`770`	`}`
`771`	`771`	`else`
`772`	`772`	`{`