[auth] use sdk function for selecting resource (#537)

* use sdk function

* bump typescript sdk

Author: pcarleton

client/src/lib/oauth-state-machine.ts

@@ -6,8 +6,8 @@ import {
   startAuthorization,
   exchangeAuthorization,
   discoverOAuthProtectedResourceMetadata,
+  selectResourceURL,
 } from "@modelcontextprotocol/sdk/client/auth.js";
-import { resourceUrlFromServerUrl } from "@modelcontextprotocol/sdk/shared/auth-utils.js";
 import {
   OAuthMetadataSchema,
   OAuthProtectedResourceMetadata,
@@ -49,16 +49,11 @@ export const oauthTransitions: Record<OAuthStep, StateTransition> = {
         }
       }
 
-      let resource: URL | undefined;
-      if (resourceMetadata) {
-        // TODO: use SDK function selectResourceURL once version bump lands to be consistent
-        resource = resourceUrlFromServerUrl(new URL(context.serverUrl));
-        if (resource.href !== resourceMetadata.resource) {
-          resourceMetadataError = new Error(
-            `Warning: metadata resource ${resourceMetadata.resource} does not match serverUrl ${context.serverUrl}`,
-          );
-        }
-      }
+      const resource = selectResourceURL(
+        context.serverUrl,
+        context.provider,
+        resourceMetadata,
+      );
 
       const metadata = await discoverOAuthMetadata(authServerUrl);
       if (!metadata) {

package-lock.json

@@ -46,7 +46,7 @@
     "@modelcontextprotocol/inspector-cli": "^0.14.3",
     "@modelcontextprotocol/inspector-client": "^0.14.3",
     "@modelcontextprotocol/inspector-server": "^0.14.3",
-    "@modelcontextprotocol/sdk": "^1.13.0",
+    "@modelcontextprotocol/sdk": "^1.13.1",
     "concurrently": "^9.0.1",
     "open": "^10.1.0",
     "shell-quote": "^1.8.2",