fix: don't leak escalated scopes in PRM scopes_supported for step-up test (#154)

2026-03-25 12:19:11 +00:00 · 2026-03-25 12:19:11 +00:00 · fe16e381c7
commit fe16e381c7
parent a2ec2d44ad
1 changed files with 1 additions and 1 deletions
--- a/src/scenarios/client/auth/scope-handling.ts
+++ b/src/scenarios/client/auth/scope-handling.ts
@ -418,7 +418,7 @@ export class ScopeStepUpAuthScenario implements Scenario {
      {
        prmPath: '/.well-known/oauth-protected-resource/mcp',
        requiredScopes: escalatedScopes,
-        scopesSupported: escalatedScopes,
+        scopesSupported: [initialScope],
        includeScopeInWwwAuth: true,
        authMiddleware: stepUpMiddleware,
        tokenVerifier