chore: upgrade @cloudflare/workers-oauth-provider 0.4.0 -> 0.7.0 (#386)

mattzcarey · web-flow · commit a358e699bdd5 · 2026-06-02T18:18:59.000+01:00
Bumps the dependency across all 17 OAuth-enabled servers + mcp-common.
The only source-level API change is that TokenExchangeCallbackOptions now
requires a grantId field (the provider supplies it at runtime); updated the
two test fixtures accordingly. types/lint/format/deps green, 110 tests pass.
diff --git a/.changeset/bump-workers-oauth-provider.md b/.changeset/bump-workers-oauth-provider.md
@@ -0,0 +1,25 @@
+---
+'cloudflare-ai-gateway-mcp-server': patch
+'cloudflare-autorag-mcp-server': patch
+'cloudflare-browser-mcp-server': patch
+'cloudflare-casb-mcp-server': patch
+'cloudflare-radar-mcp-server': patch
+'graphql-mcp-server': patch
+'workers-observability': patch
+'workers-bindings': patch
+'workers-builds': patch
+'containers-mcp': patch
+'dex-analysis': patch
+'dns-analytics': patch
+'docs-ai-search': patch
+'docs-autorag': patch
+'docs-vectorize': patch
+'auditlogs': patch
+'logpush': patch
+---
+
+Upgrade `@cloudflare/workers-oauth-provider` 0.4.0 → 0.7.0.
+
+No tool or behavior changes. The only API change affecting this repo is that
+`TokenExchangeCallbackOptions` now carries a required `grantId` field, which only
+touched a test fixture (the provider supplies it at runtime).
diff --git a/apps/ai-gateway/package.json b/apps/ai-gateway/package.json
@@ -12,7 +12,7 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@cloudflare/workers-oauth-provider": "0.4.0",
+		"@cloudflare/workers-oauth-provider": "0.7.0",
 		"@hono/zod-validator": "0.4.3",
 		"@modelcontextprotocol/sdk": "1.29.0",
 		"@repo/mcp-common": "workspace:*",
diff --git a/apps/auditlogs/package.json b/apps/auditlogs/package.json
@@ -12,7 +12,7 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@cloudflare/workers-oauth-provider": "0.4.0",
+		"@cloudflare/workers-oauth-provider": "0.7.0",
 		"@hono/zod-validator": "0.4.3",
 		"@modelcontextprotocol/sdk": "1.29.0",
 		"@repo/mcp-common": "workspace:*",
diff --git a/apps/autorag/package.json b/apps/autorag/package.json
@@ -12,7 +12,7 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@cloudflare/workers-oauth-provider": "0.4.0",
+		"@cloudflare/workers-oauth-provider": "0.7.0",
 		"@hono/zod-validator": "0.4.3",
 		"@modelcontextprotocol/sdk": "1.29.0",
 		"@repo/mcp-common": "workspace:*",
diff --git a/apps/browser-rendering/package.json b/apps/browser-rendering/package.json
@@ -12,7 +12,7 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@cloudflare/workers-oauth-provider": "0.4.0",
+		"@cloudflare/workers-oauth-provider": "0.7.0",
 		"@hono/zod-validator": "0.4.3",
 		"@modelcontextprotocol/sdk": "1.29.0",
 		"@repo/mcp-common": "workspace:*",
diff --git a/apps/cloudflare-one-casb/package.json b/apps/cloudflare-one-casb/package.json
@@ -12,7 +12,7 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@cloudflare/workers-oauth-provider": "0.4.0",
+		"@cloudflare/workers-oauth-provider": "0.7.0",
 		"@hono/zod-validator": "0.4.3",
 		"@modelcontextprotocol/sdk": "1.29.0",
 		"@repo/mcp-common": "workspace:*",
diff --git a/apps/dex-analysis/package.json b/apps/dex-analysis/package.json
@@ -13,7 +13,7 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@cloudflare/workers-oauth-provider": "0.4.0",
+		"@cloudflare/workers-oauth-provider": "0.7.0",
 		"@hono/zod-validator": "0.4.3",
 		"@modelcontextprotocol/sdk": "1.29.0",
 		"@repo/mcp-common": "workspace:*",
diff --git a/apps/dns-analytics/package.json b/apps/dns-analytics/package.json
@@ -12,7 +12,7 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@cloudflare/workers-oauth-provider": "0.4.0",
+		"@cloudflare/workers-oauth-provider": "0.7.0",
 		"@hono/zod-validator": "0.4.3",
 		"@modelcontextprotocol/sdk": "1.29.0",
 		"@repo/mcp-common": "workspace:*",
diff --git a/apps/docs-ai-search/package.json b/apps/docs-ai-search/package.json
@@ -12,7 +12,7 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@cloudflare/workers-oauth-provider": "0.4.0",
+		"@cloudflare/workers-oauth-provider": "0.7.0",
 		"@hono/zod-validator": "0.4.3",
 		"@modelcontextprotocol/sdk": "1.29.0",
 		"@repo/mcp-common": "workspace:*",
diff --git a/apps/docs-autorag/package.json b/apps/docs-autorag/package.json
@@ -12,7 +12,7 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@cloudflare/workers-oauth-provider": "0.4.0",
+		"@cloudflare/workers-oauth-provider": "0.7.0",
 		"@hono/zod-validator": "0.4.3",
 		"@modelcontextprotocol/sdk": "1.29.0",
 		"@repo/mcp-common": "workspace:*",
diff --git a/apps/docs-vectorize/package.json b/apps/docs-vectorize/package.json
@@ -12,7 +12,7 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@cloudflare/workers-oauth-provider": "0.4.0",
+		"@cloudflare/workers-oauth-provider": "0.7.0",
 		"@hono/zod-validator": "0.4.3",
 		"@modelcontextprotocol/sdk": "1.29.0",
 		"@repo/mcp-common": "workspace:*",
diff --git a/apps/graphql/package.json b/apps/graphql/package.json
@@ -12,7 +12,7 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@cloudflare/workers-oauth-provider": "0.4.0",
+		"@cloudflare/workers-oauth-provider": "0.7.0",
 		"@hono/zod-validator": "0.4.3",
 		"@modelcontextprotocol/sdk": "1.29.0",
 		"@repo/mcp-common": "workspace:*",
diff --git a/apps/logpush/package.json b/apps/logpush/package.json
@@ -12,7 +12,7 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@cloudflare/workers-oauth-provider": "0.4.0",
+		"@cloudflare/workers-oauth-provider": "0.7.0",
 		"@hono/zod-validator": "0.4.3",
 		"@modelcontextprotocol/sdk": "1.29.0",
 		"@repo/mcp-common": "workspace:*",
diff --git a/apps/radar/package.json b/apps/radar/package.json
@@ -12,7 +12,7 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@cloudflare/workers-oauth-provider": "0.4.0",
+		"@cloudflare/workers-oauth-provider": "0.7.0",
 		"@hono/zod-validator": "0.4.3",
 		"@modelcontextprotocol/sdk": "1.29.0",
 		"@repo/mcp-common": "workspace:*",
diff --git a/apps/sandbox-container/package.json b/apps/sandbox-container/package.json
@@ -19,7 +19,7 @@
 		"eval:ci": "start-server-and-test --expect 404 eval:server http://localhost:8976 'vitest run --testTimeout=60000 --config vitest.config.evals.ts'"
 	},
 	"dependencies": {
-		"@cloudflare/workers-oauth-provider": "0.4.0",
+		"@cloudflare/workers-oauth-provider": "0.7.0",
 		"@hono/node-server": "1.13.8",
 		"@hono/zod-validator": "0.4.3",
 		"@modelcontextprotocol/sdk": "1.29.0",
diff --git a/apps/workers-bindings/package.json b/apps/workers-bindings/package.json
@@ -25,7 +25,7 @@
 		"wrangler": "4.96.0"
 	},
 	"dependencies": {
-		"@cloudflare/workers-oauth-provider": "0.4.0",
+		"@cloudflare/workers-oauth-provider": "0.7.0",
 		"@modelcontextprotocol/sdk": "1.29.0",
 		"@n8n/json-schema-to-zod": "1.1.0",
 		"@repo/eval-tools": "workspace:*",
diff --git a/apps/workers-builds/package.json b/apps/workers-builds/package.json
@@ -12,7 +12,7 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@cloudflare/workers-oauth-provider": "0.4.0",
+		"@cloudflare/workers-oauth-provider": "0.7.0",
 		"@hono/zod-validator": "0.4.3",
 		"@modelcontextprotocol/sdk": "1.29.0",
 		"@repo/mcp-common": "workspace:*",
diff --git a/apps/workers-observability/package.json b/apps/workers-observability/package.json
@@ -12,7 +12,7 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@cloudflare/workers-oauth-provider": "0.4.0",
+		"@cloudflare/workers-oauth-provider": "0.7.0",
 		"@fast-csv/format": "5.0.2",
 		"@hono/zod-validator": "0.4.3",
 		"@modelcontextprotocol/sdk": "1.29.0",
diff --git a/packages/mcp-common/package.json b/packages/mcp-common/package.json
@@ -11,7 +11,7 @@
 		"test:coverage": "run-vitest-coverage"
 	},
 	"dependencies": {
-		"@cloudflare/workers-oauth-provider": "0.4.0",
+		"@cloudflare/workers-oauth-provider": "0.7.0",
 		"@fast-csv/format": "5.0.2",
 		"@hono/zod-validator": "0.4.3",
 		"@modelcontextprotocol/sdk": "1.29.0",
diff --git a/packages/mcp-common/src/cloudflare-oauth-handler.spec.ts b/packages/mcp-common/src/cloudflare-oauth-handler.spec.ts
@@ -31,6 +31,7 @@ afterEach(() => {
 function makeRefreshOptions(propsOverride: Record<string, unknown>): TokenExchangeCallbackOptions {
 	return {
 		grantType: GrantType.REFRESH_TOKEN,
+		grantId: 'test-grant-id',
 		props: propsOverride,
 		clientId: 'test',
 		userId: 'test-user',
@@ -252,6 +253,7 @@ describe('handleTokenExchangeCallback', () => {
 		it('returns undefined for authorization_code grant type', async () => {
 			const options: TokenExchangeCallbackOptions = {
 				grantType: GrantType.AUTHORIZATION_CODE,
+				grantId: 'test-grant-id',
 				props: {},
 				clientId: 'test',
 				userId: 'test-user',
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
