← Back to Opportunity Radar
GUIDED VALIDATION BRIEF

[Bug]: RFC 8414 §3.3 issuer mismatch on authv2 blocks strict MCP OAuth clients (IssuerMismatchError)

Evidence observed in atlassian/atlassian-mcp-server, a Coding project.

19 comments22 positive reactions43 days openProject Radar 87
Start free validation sprint4 guided steps · private notes · cloud sync
SOURCE EVIDENCE

Start with what users actually said

Reporter context: Before you start [x] I searched existing issues and didn't find an open duplicate. Related closed issue: #148 (original RFC 9728 PRM discovery gap). That issue was closed when + PRM shipped. Follow-up comments there already report this remaining RFC 8414 §3.3 failure; filing a dedicated open issue so it can be tracked…Excerpted from the public Issue. Read the complete thread before interpreting it.

Read original GitHub Issue ↗
01 · Reliability

Write the problem hypothesis

For [operator], the workflow fails during [condition], forcing [recovery work] and costing [time, money or trust].

You can name one user, one situation and one measurable consequence without proposing a feature.
02 · EVIDENCE INTERVIEW

Interview five affected users

  • Show me the last failure and its logs.
  • What triggered it and how often does it recur?
  • How do you detect it today?
  • What does recovery require?
  • What would a safe failure look like?
At least three people independently describe the same painful workflow with recent examples.
03 · MINIMUM TEST

Run the smallest experiment

Add one narrow guardrail, retry or recovery path around the failing step. Replay three real failure cases and compare recovery time.

The same failure is recovered faster in three real cases without creating a new incident.
04 · DECISION GATE

Make a build decision

  • Build: repeated pain and active commitment
  • Narrow: pain is real but the audience or job differs
  • Stop: weak frequency or no behavioral proof
Do not let GitHub engagement replace direct validation.

Why this brief exists

Information has value only when it changes action. This page turns one public signal into a bounded validation exercise. It is a research aid, not proof of demand, investment advice or a product recommendation.