fix: follow redirects for OAuth endpoint requests

Author: clareliguori

e2e_tests/python/server_clients/automated_oauth.py

@@ -128,7 +128,7 @@ async def perform_client_credentials_flow(self) -> None:
             async with httpx.AsyncClient() as client:
                 base_url = self.authorization_server_url.rstrip("/")
                 metadata_url = f"{base_url}/.well-known/oauth-authorization-server"
-                response = await client.get(metadata_url)
+                response = await client.get(metadata_url, follow_redirects=True)
 
                 if response.status_code != 200:
                     raise RuntimeError(
@@ -330,7 +330,9 @@ async def _discover_scope_and_auth_server(self, server_url: str) -> tuple[str, s
 
         async with httpx.AsyncClient() as client:
             headers = {MCP_PROTOCOL_VERSION: LATEST_PROTOCOL_VERSION}
-            response = await client.get(server_url, headers=headers)
+            response = await client.get(
+                server_url, headers=headers, follow_redirects=True
+            )
 
             if response.status_code != 401:
                 raise RuntimeError(
@@ -364,7 +366,9 @@ async def _discover_scope_and_auth_server(self, server_url: str) -> tuple[str, s
 
             # Fetch protected resource metadata
             logging.debug("Fetching OAuth protected resource metadata...")
-            metadata_response = await client.get(resource_metadata_url, headers=headers)
+            metadata_response = await client.get(
+                resource_metadata_url, headers=headers, follow_redirects=True
+            )
 
             if metadata_response.status_code != 200:
                 raise RuntimeError(

examples/chatbots/python/server_clients/interactive_oauth.py

@@ -396,7 +396,9 @@ async def discover_scope(
 
         async with httpx.AsyncClient() as client:
             headers = {MCP_PROTOCOL_VERSION: LATEST_PROTOCOL_VERSION}
-            response = await client.get(server_url, headers=headers)
+            response = await client.get(
+                server_url, headers=headers, follow_redirects=True
+            )
 
             discovery_request = await oauthProvider._discover_protected_resource(
                 response