auth: respect full resourceMetadataUrl url, and pass protocolVersion through

Author: ochafik

src/client/auth.ts

@@ -91,21 +91,29 @@ export class UnauthorizedError extends Error {
 export async function auth(
   provider: OAuthClientProvider,
   { serverUrl,
+    protocolVersion,
     authorizationCode,
     scope,
     resourceMetadataUrl,
   }: {
     serverUrl: string | URL;
+    protocolVersion?: string;
     authorizationCode?: string;
     scope?: string;
     resourceMetadataUrl?: URL }): Promise<AuthResult> {
 
   const resource = resourceUrlFromServerUrl(typeof serverUrl === "string" ? new URL(serverUrl) : serverUrl);
 
   let authorizationServerUrl = serverUrl;
+  let resource: URL | undefined;
   try {
     const resourceMetadata = await discoverOAuthProtectedResourceMetadata(
-      resourceMetadataUrl || serverUrl);
+      serverUrl,
+      {
+        protocolVersion,
+        resourceMetadataUrl,
+      }
+    );
 
     if (resourceMetadata.authorization_servers && resourceMetadata.authorization_servers.length > 0) {
       authorizationServerUrl = resourceMetadata.authorization_servers[0];