muster release v5.32.13
Fixed
- A token exchange answered by a proxy names what answered. When something other than the remote Dex answers the RFC 8693 exchange, typically an ingress or proxy returning an HTML page, the exchange error and its audit line carried the whole page. mcp-oauth v1.4.10 describes such an answer by its status, content type and HTML title, or by the first 200 bytes of anything else (
token exchange failed with status 401 (content type "text/html", not an OAuth error response): HTML page "401 Authorization Required"). A 5xx answer still marks the server Failed. (giantswarm/giantswarm#36943)