Function challengeFor

apps/host-selfhost/src/mcp/auth.ts:172–173

(request: Request)

      // as the envelope's default; we supply it explicitly to keep the 401's
      // `WWW-Authenticate` fully owned by the provider.
      const challengeFor = (request: Request): string =>
        `Bearer resource_metadata="${resourceMetadataUrl(request)}"`;

      const discoveryRoutes: ReadonlyArray<McpDiscoveryRoute> = [
        {