Fixes #123: allow usage of default_scope to be passed

Signed-off-by: Jesse Sanford <[email protected]>

Author: jessesanford

fastapi_mcp/auth/proxy.py

@@ -199,8 +199,10 @@ async def oauth_authorize_proxy(
         if not scope:
             logger.warning("Client didn't provide any scopes! Using default scopes.")
             scope = default_scope
+            logger.debug(f"Default scope: {scope}")
 
         scopes = scope.split()
+        logger.debug(f"Scopes passed: {scopes}")
         for required_scope in default_scope.split():
             if required_scope not in scopes:
                 scopes.append(required_scope)

fastapi_mcp/server.py

@@ -264,6 +264,7 @@ def _setup_auth_2025_03_26(self):
                     client_id=self._auth_config.client_id,
                     authorize_url=self._auth_config.authorize_url,
                     audience=self._auth_config.audience,
+                    default_scope=self._auth_config.default_scope,
                 )
                 if self._auth_config.setup_fake_dynamic_registration:
                     assert self._auth_config.client_secret is not None