Summary

Closes #107

Adds a public API for discovering and using all scopes supported by the OAuth authorization server, eliminating the need to call private methods.

Changes

OAuthProvider

• Added public supported_scopes method — returns Array<String> of scopes from server discovery, or [] if the server does not advertise scopes. Result is memoized.
• Added scope: :all shorthand — when scope is set to the symbol :all, it is resolved lazily during start_authorization_flow to supported_scopes.join(" ") without mutating @scope.

Before / After

Before:

provider.scope = provider.send(:discover_authorization_server).scopes_supported.join(" ")
provider.start_authorization_flow

After:

# Option A — explicit
provider.scope = provider.supported_scopes.join(" ")
provider.start_authorization_flow

# Option B — shorthand
provider = MCPClient::Auth::OAuthProvider.new(
  server_url: url,
  redirect_uri: uri,
  scope: :all
)
provider.start_authorization_flow

Tests

• supported_scopes returns array from server metadata
• supported_scopes returns [] when scopes_supported is nil
• scope: :all resolves correctly during authorization flow
• All existing specs pass

Branch: feature/supported-scopes
URL: https://github.com/simonx1/ruby-mcp-client/pull/new/feature/supported-scopes