• fixed broken tests on main due to async handling
• Relax auth validation to permit additional responses in list fields
• Correct token_type and normalize to align with spec

Fixes #814

Motivation and Context

The validation prevented usage with 3rd party Oauth AS. The pydantic models are both used for validating hosted Oauth endpoints and validating responses from 3rd party AS.

How Has This Been Tested?

tested the simple auth client example against a remote MCP server with a 3rd party AS

Breaking Changes

n/a

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• Documentation update

Checklist

• I have read the MCP Documentation
• My code follows the repository's style guidelines
• New and existing tests pass locally
• I have added appropriate error handling
• I have added or updated documentation as needed

Additional context