fix(gateway): restore disabled auth on auto-start by its-mash · Pull Request #211 · mcpmux/mcp-mux

its-mash · 2026-07-15T01:31:40Z

Summary

centralize loading of the persisted inbound-auth setting
apply the setting to both manual and automatic gateway startup
add regression coverage for the secure default and persisted disabled state

Root cause

start_gateway restored gateway.auth_disabled after creating GatewayState, but the desktop auto-start path created the same state without restoring the setting. Relaunching the app therefore reverted a configured no-auth gateway to auth-required until the user toggled the setting again.

Impact

When Disable authentication is enabled, relaunching McpMux now preserves that behavior. A missing setting or repository read failure still defaults to authentication required.

Validation

cargo +1.88.0 fmt --all -- --check
cargo +1.88.0 test -p mcpmux --lib — 34 passed
cargo +1.88.0 clippy -p mcpmux --lib -- -D warnings -A clippy::uninlined_format_args

The narrow Clippy allowance is for a pre-existing Rust 1.88 lint in crates/mcpmux-core/build.rs; the changed files pass with warnings denied.

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

#54) Co-authored-by: Claude <noreply@anthropic.com>

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Signed-off-by: Claude <noreply@anthropic.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Co-authored-by: Claude <noreply@anthropic.com>

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

#71) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Co-authored-by: Claude <noreply@anthropic.com>

…61) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: Mohammod Al Amin Ashik <alamin.ashik@sitecore.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Signed-off-by: Claude <noreply@anthropic.com> Co-authored-by: Claude <noreply@anthropic.com>

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Signed-off-by: Claude <noreply@anthropic.com> Co-authored-by: Mohammod Al Amin Ashik <alamin.ashik@sitecore.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

… logs (#76) Signed-off-by: Claude <noreply@anthropic.com> Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Signed-off-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Claude <noreply@anthropic.com>

Signed-off-by: Claude <noreply@anthropic.com> Co-authored-by: Claude <noreply@anthropic.com>

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Signed-off-by: Claude <noreply@anthropic.com> Co-authored-by: Claude <noreply@anthropic.com>

… step (#82) Signed-off-by: Claude <noreply@anthropic.com> Co-authored-by: Claude <noreply@anthropic.com>

Signed-off-by: Claude Sonnet 4.5 <noreply@anthropic.com> Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Signed-off-by: Myko <maa.ashik00@gmail.com> Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

#174) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: its-mash <maa.ashik00@gmail.com>

…pace (#179) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

…lder setup (#182) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

…dvertising) (#187) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

…flows (#188) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

…189) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

…ect (#190) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

…#198) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

Co-authored-by: its-mash <maa.ashik00@gmail.com>

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: its-mash <maa.ashik00@gmail.com>

Co-authored-by: its-mash <maa.ashik00@gmail.com>

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: its-mash <maa.ashik00@gmail.com>

…#200) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

) Co-authored-by: Mohammod Al Amin Ashik <alamin.ashik@sitecore.com>

Signed-off-by: Xuleileon <xuleileon19932022@163.com>

its-mash and others added 30 commits February 9, 2026 12:33

chore: update deps and registry API client (#55)

0def66b

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

feat: Add custom server configuration fields (env vars, args, headers) (

37ce0f5

#54) Co-authored-by: Claude <noreply@anthropic.com>

fix: Update screenshots and Logo (#56)

e6fb736

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

chore(main): release 0.0.8 (#45)

1d111ce

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

fix: render server icon URLs as images instead of raw text (#57)

5a94708

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Signed-off-by: Claude <noreply@anthropic.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

chore(main): release 0.0.9 (#58)

2b4f90a

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

fix: suppress console window for stdio MCP servers on Windows (#59)

98f862c

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

chore(main): release 0.0.10 (#60)

3ffa395

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

docs: add mcpmux.com links and download references to README (#64)

04ab100

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

fix: Claude client icon resolving (#68)

c54128e

Co-authored-by: Claude <noreply@anthropic.com>

Redesign McpMux glyph to simplified dots + bold M layout (#66)

93f04c5

Co-authored-by: Claude <noreply@anthropic.com>

renane to ion-ash

9bfd6a4

fix: Fix refresh token issue (#69)

0eba047

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

chore(main): release 0.0.11 (#65)

d1a9186

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

feat: update logo with bolder strokes and regenerate icons/screenshots (

68c292c

#71) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

feat: support default values for input definitions (#70)

a1d9599

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

feat: Capture and stream process stderr to server log manager (#63)

96795b0

Co-authored-by: Claude <noreply@anthropic.com>

feat: Streamable HTTP transport with SSE notifications and E2E tests (#…

ca5b0ff

…61) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: Mohammod Al Amin Ashik <alamin.ashik@sitecore.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

chore(main): release 0.0.12 (#72)

47ce589

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Disable macOS builds in CI workflows pending signing key (#77)

9858cd0

Signed-off-by: Claude <noreply@anthropic.com> Co-authored-by: Claude <noreply@anthropic.com>

fix: e2e flaky fix (#75)

d8e28f8

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Signed-off-by: Claude <noreply@anthropic.com> Co-authored-by: Mohammod Al Amin Ashik <alamin.ashik@sitecore.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

feat: apply McpMux branding to OAuth authorization pages (#74)

c84e036

Signed-off-by: Claude <noreply@anthropic.com> Co-authored-by: Claude <noreply@anthropic.com>

feat: add Homebrew tap support and ad-hoc macOS signing (#79)

b07f1a3

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Enable macOS builds with ad-hoc signing in CI/CD workflows (#81)

005ab3e

Signed-off-by: Claude <noreply@anthropic.com> Co-authored-by: Claude <noreply@anthropic.com>

Refactor release workflow to use draft releases with explicit publish…

db63e5d

… step (#82) Signed-off-by: Claude <noreply@anthropic.com> Co-authored-by: Claude <noreply@anthropic.com>

fix: taskbar icon visibility (#83)

400c4bc

Signed-off-by: Claude Sonnet 4.5 <noreply@anthropic.com> Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

chore: Update funding sources in FUNDING.yml (#86)

1ccf019

feat: add Linux APT repository and install infrastructure (#85)

473eb1a

Signed-off-by: Myko <maa.ashik00@gmail.com> Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

feat: redesign README, screenshots, and E2E capture (#87)

84f15cb

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

its-mash and others added 28 commits June 18, 2026 20:34

feat(workspaces): setting to disable the new-folder mapping prompt (#177

d5df002

) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

fix(deps): resolve 4 transitive security advisories failing Dependabot (

eb32289

#174) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

chore(deps): bump rustls-webpki from 0.103.9 to 0.103.13 (#150)

7e5a319

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: its-mash <maa.ashik00@gmail.com>

feat(spaces): per-space base directories scope workspace roots to a S…

fb825cf

…pace (#179) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

fix(spaces): clearer base-directories UX (#180)

4a69908

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

chore(main): release 0.4.0 (#146)

6ac98ef

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

feat: per-workspace routing via X-Mcpmux-Workspace header + guided fo…

e2ec055

…lder setup (#182) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

feat(ui): opencode global connect + client icons (#184)

669e99f

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

fix(ui): show official opencode logo in the Apps tab (#185)

608a841

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

fix(gateway): truly no-auth when inbound auth is disabled (no OAuth a…

3e617fd

…dvertising) (#187) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

fix(storage): drop a deleted FeatureSet from workspace bindings (#186)

5598451

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

test(gateway): end-to-end coverage for both auth-enabled and no-auth …

db1596f

…flows (#188) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

fix(oauth): de-duplicate deep-link handling + quiet status-poll log (#…

9dd7b58

…189) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

fix(ui): scroll-to + flash the target Settings section on every redir…

e032c9b

…ect (#190) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

chore(main): release 0.5.0 (#183)

57276b7

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

ci: make desktop PR/E2E builds fork-safe (no signing secret required) (…

1d759b4

…#198) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

chore: sync Cargo.lock workspace package versions (#191)

71f18ca

Co-authored-by: its-mash <maa.ashik00@gmail.com>

fix: sync custom server config saves immediately (#195)

536a4ce

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: its-mash <maa.ashik00@gmail.com>

fix: make feature discovery capability-aware and bounded (#194)

c2a1569

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: its-mash <maa.ashik00@gmail.com>

fix: filter invalid DCR redirect URIs (#193)

187b57c

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: its-mash <maa.ashik00@gmail.com>

fix: avoid synthetic connecting state for enabled servers (#196)

80045c6

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: its-mash <maa.ashik00@gmail.com>

fix: restore titlebar drag region without breaking controls (#197)

47c787c

Co-authored-by: its-mash <maa.ashik00@gmail.com>

feat: support configurable public gateway base URL (#192)

6f81378

Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com> Co-authored-by: its-mash <maa.ashik00@gmail.com>

feat(gateway): optional network access — bind 0.0.0.0 for LAN sharing (…

9e481e7

…#200) Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

Add claude GitHub actions 1784077520436 (#207)

a5bf1e8

fix: add id-token write permission for codecov OIDC authentication (#208

ca6745a

) Co-authored-by: Mohammod Al Amin Ashik <alamin.ashik@sitecore.com>

Merge branch 'main' of github.com-personal:MCP-Mux/mcp-mux

049de49

fix(gateway): restore disabled auth on auto-start

1e326bc

Signed-off-by: Xuleileon <xuleileon19932022@163.com>

its-mash closed this Jul 15, 2026

its-mash deleted the agent/restore-gateway-auth-setting-on-autostart branch July 15, 2026 01:46

Navigation Menu

Uh oh!

Uh oh!

fix(gateway): restore disabled auth on auto-start - #211

fix(gateway): restore disabled auth on auto-start#211
its-mash wants to merge 138 commits into
mainfrom
agent/restore-gateway-auth-setting-on-autostart

its-mash commented Jul 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Uh oh!

Conversation

its-mash commented Jul 15, 2026

Summary

Root cause

Impact

Validation

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants