feat: restore OAuth actions in gateways partial (#2083)

madhav165 · web-flow · commit 0d8fb7191c6f · 2026-01-15T00:22:59.000Z
Add "Authorize" and "Fetch Tools" buttons for OAuth-enabled gateways,
matching the main admin interface layout.

Use |tojson filter for gateway.name in onclick handler to prevent
potential XSS from gateway names containing quotes or backslashes.

Signed-off-by: Mihai Criveti &lt;crivetimihai@gmail.com&gt;
diff --git a/mcpgateway/templates/gateways_partial.html b/mcpgateway/templates/gateways_partial.html
@@ -29,11 +29,25 @@
               Test
             </button>
 
-            <!-- Row 2: View | Edit -->
+            {% if gateway.authType == 'oauth' %}
+            <!-- Row 2: OAuth Authorize | Fetch Tools -->
+            <a href="{{ root_path }}/oauth/authorize/{{ gateway.id }}"
+              class="flex items-center justify-center px-2 py-1 text-xs font-medium rounded-md text-indigo-600 hover:text-indigo-900 hover:bg-indigo-50 dark:text-indigo-400 dark:hover:bg-indigo-900/20 transition-colors"
+              x-tooltip="'🔐 Authorize Users for OAuth'">
+              🔐 Authorize
+            </a>
+            <button onclick="fetchToolsForGateway({{ gateway.id|tojson }}, {{ gateway.name|tojson }})"
+              class="flex items-center justify-center px-1 py-1 text-xs font-medium rounded-md text-green-600 hover:text-green-900 hover:bg-green-50 dark:text-green-400 dark:hover:bg-green-900/20 transition-colors"
+              x-tooltip="'🔧 Fetch Tools from MCP Server'" id="fetch-tools-{{ gateway.id }}">
+              🔧 Fetch Tools
+            </button>
+            {% endif %}
+
+            <!-- Row 3: View | Edit -->
             <button onclick="viewGateway('{{ gateway.id }}')" class="flex items-center justify-center px-2 py-1 text-xs font-medium rounded-md text-indigo-600 hover:text-indigo-900 hover:bg-indigo-50 dark:text-indigo-400 dark:hover:bg-indigo-900/20 transition-colors">View</button>
             <button onclick="editGateway('{{ gateway.id }}')" class="flex items-center justify-center px-2 py-1 text-xs font-medium rounded-md text-green-600 hover:text-green-900 hover:bg-green-50 dark:text-green-400 dark:hover:bg-green-900/20 transition-colors">Edit</button>
 
-            <!-- Row 3 & 4: Activate/Deactivate | Delete -->
+            <!-- Row 4: Activate/Deactivate | Delete -->
             <div class="col-span-2 flex flex-col space-y-1">
               <form method="POST" action="{{ root_path }}/admin/gateways/{{ gateway.id }}/toggle" class="contents" onsubmit="return handleToggleSubmit(event, 'gateways')">
                 <input type="hidden" name="activate" value="{{ 'false' if gateway.enabled else 'true' }}" />
