Pegasus Heavy Industries
December 15, 2025 •
🔐 Integrated OAuth & Memory-Only Tokens
Major security and UX improvements! v1.2.0 brings integrated OAuth 2.0 authentication and memory-only token caching for maximum security.
🎯 Key Features
- Integrated OAuth Flow: Browser auto-opens for LinkedIn authorization on first use
- Memory-Only Tokens: Tokens cached in process memory, never written to disk
- Session-Based Auth: Tokens automatically cleared when server stops
- MCP Client Config: Environment variables set directly in client config files
- Higher OAuth Port: Changed default from 3000 to 50001 to avoid conflicts
🔒 Security Benefits
- No token files to manage or secure
- Tokens cleared automatically on process end
- Container-friendly - no filesystem state
- CSRF protection with state parameter validation
- Automatic token refresh within session
🚀 Simplified Setup
Before: Create .env file → Run OAuth script → Copy token
After: Edit MCP client config → Start server → Browser opens automatically ✨
❌ Removed
- Separate
oauth-helperscript - Disk-based token persistence
.envfile dependencydotenvpackage
📝 Note: Update your LinkedIn app redirect URL from localhost:3000 to localhost:50001