mateo-berri ca8e04c05e fix(mcp): emit absolute resource_metadata URI in fabricated 401 challenge ... Per RFC 9728 §3.2 the resource_metadata Bearer challenge must be an absolute URI; strict MCP clients reject relative URIs and fail to initiate discovery. MCPUpstreamAuthError.to_http_exception now accepts the gateway base URL and prepends it when the upstream omitted WWW-Authenticate, and all four call sites (streamable HTTP, SSE, and the two REST tool-list paths) supply it.		2026-05-21 19:59:55 +00:00
..
mcp_server	fix(mcp): emit absolute resource_metadata URI in fabricated 401 challenge	2026-05-21 19:59:55 +00:00