muster release v0.4.1
Changed
- Update mcp-oauth to v0.3.1: forwarded ID tokens (
trustedAudiences) are no longer hard-rejected by the trusted-issuer Bearer branch when the same issuer is also configured intrustedIssuers— fixes Backstage AI-chat SSO token forwarding returning 401 (typ header is "", expected "at+jwt") on deployments with the token-exchange broker enabled. (#838)