MCP OAuth 2.1 in Practice: Authorization Server Discovery, PKCE, and Token Validation That Actually Works September 25, 2026 · Dev.to Read full story at source