Function resourceMetadata

packages/core/sdk/src/oauth-ema.test.ts:107–114

(fixture: EnterpriseFixture)

 *  restatement would pass even if the production schema silently dropped
 *  `authorization_grant_profiles_supported` — the field this whole gate reads. */
const resourceMetadata = (fixture: EnterpriseFixture) =>
  Effect.gen(function* () {
    const response = yield* Effect.promise(() =>
      // oxlint-disable-next-line executor/no-raw-fetch -- test boundary: reads the fixture's metadata document exactly as the connect path's discovery does
      globalThis.fetch(`${fixture.resource.issuerUrl}/.well-known/oauth-authorization-server`),
    );
    return yield* decodeMetadata(yield* Effect.promise((): Promise<unknown> => response.json()));
  });

describe("enterprise-managed authorization: the ID-JAG chain", () => {
  it.effect("mints an MCP access token from an enterprise identity assertion", () =>