- drop the response-writer wrapper that appended scope="read" to every 401 - the SDK handler now gets the original writer; RequireBearerToken still sets no Scopes - TestPierTracerSmoke pins the exact challenge for a bad and a missing bearer - README and docs/services/mcp.md describe the header without a scope parameter
11 KiB
11 KiB