Removed the unused 7-arg constructor, the redirectUriProvidedExplicitly
field, and its never-called getter/setter from AuthorizationCode.java.
A whole-repo search found zero callers of the 7-arg constructor (both
production sites use the no-arg constructor + setters), and the
redirectUriProvidedExplicitly field/accessors are unused on this
class (the only call to setRedirectUriProvidedExplicitly is on the
sibling AuthorizationParams class). The field's only writer was the
removed constructor, so it cascaded to fully dead.

Describe your changes:

Fixes #N/A (dead-code cleanup, no associated issue)

I worked on removing unused code from AuthorizationCode.java because
the 7-arg constructor and redirectUriProvidedExplicitly accessors
had zero callers and were misleading (the constructor notably omits
the PKCE-essential codeVerifier, so using it would produce a code
that fails PKCE verification).

Type of change:

• Bug fix
• Improvement
• New feature
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation

High-level design:

N/A — small change (single file, ~27 lines removed).

Tests:

Use cases covered

Unit tests

• N/A — no logic change; removal of uncalled constructor/accessors.
  Verified build (mvn compile -pl openmetadata-mcp) and existing tests pass:
  OAuthHttpStatelessServerTransportProviderTest (26 tests) and the auth
  handler tests (AuthorizationHandlerTest, McpCallbackServletTest,
  RegistrationHandlerTest, RevocationHandlerTest — 67 tests) all green.

Backend integration tests

• Not applicable (no backend API changes).

Ingestion integration tests

• Not applicable (no ingestion changes).

Playwright (UI) tests

• Not applicable (no UI changes).

Manual testing performed

UI screen recording / screenshots:

Not applicable.

Checklist:

• I have read the CONTRIBUTING document.
• My PR title is Fixes <issue-number>: <short explanation>
• My PR is linked to a GitHub issue via Fixes #<issue-number> above.
• I have commented on my code, particularly in hard-to-understand areas.
• For JSON Schema changes: I updated the migration scripts or explained why it is not needed.
• For UI changes: I attached a screen recording and/or screenshots above.
• I have added tests (unit / integration / Playwright as applicable) and listed them above.

History

• Last materially changed March 2026 (Mcp oauth #25391 @Vishnuujain)

Dead Code PRs can be configured here.