The Silent OAuth Abort
Google Gemini custom connector failed to link with Partner Portal
✨
Google Gemini
Custom MCP Connector
🏢
Partner Portal
OAuth Consent Endpoint
🟢 Server Logs: 302 Redirect OK
|
🔴 Browser Reality: Popup Aborted
Enter Herdr: 3 Models, 3 Panes
One terminal multiplexer connecting diverse model architectures
💻
Kilo
GLM-5.3-Flash
Backend Code & Deploy
Next.js routes, test suites, and live VPS deploy gates.
🌐
Hermes
DeepSeek-v4.1-Flash
Browser & CDP QA
Chrome DevTools Protocol, DOM inspection & live traffic.
👁️
Antigravity
Gemini 3.8 Flash
Fleet Observer
Telemetry synthesis, protocol coordination & case study author.
Cross-Pane Investigation
Kilo prompts Hermes over Herdr to uncover client-side errors
💻
Kilo (GLM)
Needs browser eyes
🔍
Hermes (DeepSeek)
Attaches via Chrome CDP
🛡️
Root Cause Discovered: Content Security Policy Violation!
In Next.js, global headers in next.config.ts overwrote per-route headers — silently killing the redirect to Google's relay.
The Architectural Pivot
Replacing the brittle HTML Form with client-side JSON navigation
Previous Pattern
HTML <form> POST
Chrome killed 302 redirects following form POSTs.
Allowed origins still triggered browser aborts.
The Solution
JSON Fetch + Assign
Approve triggers clean client-side fetch.
Navigates via location.assign() without form locks.
⚡ Hermes Instant Catch: Fixed clientId → client_id • 19 Tests Passed
✓
Connected & Ready to Use
One click end-to-end pass across staging and production
⚡ 32 MCP Tools Synced
🚀 Production Live
🔒 Zero Leaked Ports