fix: don't leak escalated scopes in PRM scopes_supported for step-up test (#154)

This commit is contained in:
Paul Carleton 2026-03-25 12:19:11 +00:00 • committed by GitHub
commit fe16e381c7
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -418,7 +418,7 @@ export class ScopeStepUpAuthScenario implements Scenario {
{ {
prmPath: '/.well-known/oauth-protected-resource/mcp', prmPath: '/.well-known/oauth-protected-resource/mcp',
requiredScopes: escalatedScopes, requiredScopes: escalatedScopes,
scopesSupported: escalatedScopes, scopesSupported: [initialScope],
includeScopeInWwwAuth: true, includeScopeInWwwAuth: true,
authMiddleware: stepUpMiddleware, authMiddleware: stepUpMiddleware,
tokenVerifier tokenVerifier