()
| 38 | const ORG_ID = "org_test"; |
| 39 | |
| 40 | const request = () => |
| 41 | new Request("https://executor.sh/mcp", { |
| 42 | method: "POST", |
| 43 | headers: { |
| 44 | authorization: "Bearer token_fixture", |
| 45 | [MCP_ORGANIZATION_HEADER]: ORG_ID, |
| 46 | "content-type": "application/json", |
| 47 | }, |
| 48 | body: JSON.stringify({ jsonrpc: "2.0", method: "tools/list", id: 1 }), |
| 49 | }); |
| 50 | |
| 51 | // A verified bearer that carries an account + org — the org-authorize branch is |
| 52 | // what we exercise, so verifyBearer succeeds here. |