Test Failure Analysis

Summary: Two tests in tests/server/auth/providers/test_azure_scopes.py fail because they were not updated to reflect the PR's change from using client_id to identifier_uri (defaulting to api://{client_id}) as the JWT audience.

Root Cause: The PR correctly updates AzureJWTVerifier to set audience=self._identifier_uri (which defaults to api://{client_id}) instead of audience=client_id. However, two tests still assert the old behavior:

1. test_auto_configures_from_client_and_tenant — asserts verifier.audience == "my-client-id" but the new value is "api://my-client-id"
2. test_validates_short_form_scopes — creates a JWT with audience="my-client-id" but the verifier now expects audience="api://my-client-id", so validation fails and returns None

Suggested Solution: Update tests/server/auth/providers/test_azure_scopes.py:

1. Line 416 — change the audience assertion:

# Before
assert verifier.audience == "my-client-id"
# After
assert verifier.audience == "api://my-client-id"

2. Line 434 — change the token audience to match what the verifier now expects:

# Before
token = key_pair.create_token(
    subject="test-user",
    issuer="https://login.microsoftonline.com/my-tenant-id/v2.0",
    audience="my-client-id",
    ...
)
# After
token = key_pair.create_token(
    subject="test-user",
    issuer="https://login.microsoftonline.com/my-tenant-id/v2.0",
    audience="api://my-client-id",
    ...
)

FAILED tests/server/auth/providers/test_azure_scopes.py::TestAzureJWTVerifier::test_auto_configures_from_client_and_tenant
  AssertionError: assert 'api://my-client-id' == 'my-client-id'
  - my-client-id
  + api://my-client-id

FAILED tests/server/auth/providers/test_azure_scopes.py::TestAzureJWTVerifier::test_validates_short_form_scopes
  assert None is not None

# AzureJWTVerifier.__init__
self._identifier_uri = identifier_uri or f"api://{client_id}"
# ...
audience=self._identifier_uri,  # was: audience=client_id

🤖 Generated with Claude Code