{"version":"2.1.235","anchor":"mcp-oauth-callback-listeners-moved-off-module-level-maps-ont","canonical_anchor":"mcp-oauth-callback-listeners-moved-off-module-level-maps-ont","heading":"MCP OAuth callback listeners moved off module-level maps onto a session-scoped registry","tier":"internal","area":"MCP","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.235\/e\/mcp-oauth-callback-listeners-moved-off-module-level-maps-ont","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.235","markdown":"### MCP OAuth callback listeners moved off module-level maps onto a session-scoped registry\n\nMCP OAuth callback tracking moved from shared global maps to per-session state\n\nBoth MCP OAuth flows previously tracked in-flight callback aborts using module-level `new Map()` globals shared across the process. Those globals are gone; abort tracking and registration now live on a per-session object property instead, so a new session no longer inherits pending OAuth callback listeners left over from another session.\n\n- Area: MCP\n- Tier: Under the hood\n- Useful: 1\/5\n- Signal: 1\/5"}