All of the mid-session and step-up auth work

test-servers/configs/oauth-step-up-demo.json

@@ -0,0 +1,22 @@
+{
+  "serverInfo": {
+    "name": "oauth-step-up-demo",
+    "version": "1.0.0"
+  },
+  "tools": [
+    { "preset": "echo" },
+    { "preset": "get_temp", "requiredScopes": ["weather:read"] }
+  ],
+  "oauth": {
+    "enabled": true,
+    "mode": "combined",
+    "requireAuth": true,
+    "scopesSupported": ["mcp", "tools:read", "weather:read"],
+    "supportRefreshTokens": true,
+    "supportDCR": true
+  },
+  "transport": {
+    "type": "streamable-http",
+    "port": 8081
+  }
+}

test-servers/configs/xaa-ema-http.json

@@ -3,7 +3,10 @@
     "name": "xaa-ema-resource",
     "version": "1.0.0"
   },
-  "tools": [{ "preset": "echo" }, { "preset": "get_temp" }],
+  "tools": [
+    { "preset": "echo", "requiredScopes": ["tools:read"] }, 
+    { "preset": "get_env", "requiredScopes": ["tools:read", "env:read"] }
+  ],
   "transport": {
     "type": "streamable-http",
     "port": 8080
@@ -13,7 +16,7 @@
     "mode": "protected-resource",
     "authorizationServers": ["https://auth.resource.xaa.dev"],
     "requireAuth": true,
-    "scopesSupported": ["mcp"],
+    "scopesSupported": ["mcp", "tools:read", "env:read"],
     "accessTokenIssuers": ["https://auth.resource.xaa.dev"],
     "jwksUri": "https://auth.resource.xaa.dev/jwks",
     "resource": "http://localhost:8080/",