Convert token-verification failures into OAuth challenge responses.
Verification error to translate.
OAuth resource-server configuration.
HTTP response suitable for the MCP endpoint.
OAuth dependency failures become 503 responses so clients can distinguish an authorization-server outage from an invalid bearer token. Other failures use the MCP SDK bearer challenge helper with the configured required scopes.
Convert token-verification failures into OAuth challenge responses.