simplify tests

Author: ochafik

src/client/auth.test.ts

@@ -1030,65 +1030,5 @@ describe("OAuth Authorization", () => {
       expect(body.get("grant_type")).toBe("refresh_token");
       expect(body.get("refresh_token")).toBe("refresh123");
     });
-
-    it("verifies resource parameter distinguishes between different paths on same domain", async () => {
-      // Mock successful metadata discovery
-      mockFetch.mockImplementation((url) => {
-        const urlString = url.toString();
-        if (urlString.includes("/.well-known/oauth-authorization-server")) {
-          return Promise.resolve({
-            ok: true,
-            status: 200,
-            json: async () => ({
-              issuer: "https://auth.example.com",
-              authorization_endpoint: "https://auth.example.com/authorize",
-              token_endpoint: "https://auth.example.com/token",
-              response_types_supported: ["code"],
-              code_challenge_methods_supported: ["S256"],
-            }),
-          });
-        }
-        return Promise.resolve({ ok: false, status: 404 });
-      });
-
-      // Mock provider methods
-      (mockProvider.clientInformation as jest.Mock).mockResolvedValue({
-        client_id: "test-client",
-        client_secret: "test-secret",
-      });
-      (mockProvider.tokens as jest.Mock).mockResolvedValue(undefined);
-      (mockProvider.saveCodeVerifier as jest.Mock).mockResolvedValue(undefined);
-      (mockProvider.redirectToAuthorization as jest.Mock).mockResolvedValue(undefined);
-
-      // Test with different resource paths on same domain
-      // This tests the security fix that prevents token confusion between
-      // multiple MCP servers on the same domain
-      const result1 = await auth(mockProvider, {
-        serverUrl: "https://api.example.com/mcp-server-1/v1",
-      });
-
-      expect(result1).toBe("REDIRECT");
-
-      const redirectCall1 = (mockProvider.redirectToAuthorization as jest.Mock).mock.calls[0];
-      const authUrl1: URL = redirectCall1[0];
-      expect(authUrl1.searchParams.get("resource")).toBe("https://api.example.com/mcp-server-1/v1");
-
-      // Clear mock calls
-      (mockProvider.redirectToAuthorization as jest.Mock).mockClear();
-
-      // Test with different path on same domain
-      const result2 = await auth(mockProvider, {
-        serverUrl: "https://api.example.com/mcp-server-2/v1",
-      });
-
-      expect(result2).toBe("REDIRECT");
-
-      const redirectCall2 = (mockProvider.redirectToAuthorization as jest.Mock).mock.calls[0];
-      const authUrl2: URL = redirectCall2[0];
-      expect(authUrl2.searchParams.get("resource")).toBe("https://api.example.com/mcp-server-2/v1");
-      
-      // Verify that the two resources are different (critical for security)
-      expect(authUrl1.searchParams.get("resource")).not.toBe(authUrl2.searchParams.get("resource"));
-    });
   });
 });