Add authorization header handling in McpTransportIntegrationTest

- Included logic to add the 'Authorization' header from $_SERVER if it is set in multiple request creation methods.
- Enhanced test cases to ensure proper handling of authorization in transport requests, improving integration test coverage.

Author: galatanovidiu

tests/phpunit/McpTransportIntegrationTest.php

@@ -240,6 +240,12 @@ private function create_stdio_request( string $method, array $params = array() )
 			'params' => $params,
 		) ) );
 		$request->add_header( 'Content-Type', 'application/json' );
+		
+		// Include authorization header from $_SERVER if set.
+		if ( isset( $_SERVER['HTTP_AUTHORIZATION'] ) ) {
+			$request->add_header( 'Authorization', sanitize_text_field( wp_unslash( $_SERVER['HTTP_AUTHORIZATION'] ) ) );
+		}
+		
 		return $request;
 	}
 
@@ -260,6 +266,12 @@ private function create_streamable_request( string $method, array $params = arra
 		) ) );
 		$request->add_header( 'Content-Type', 'application/json' );
 		$request->add_header( 'Accept', 'application/json, text/event-stream' );
+		
+		// Include authorization header from $_SERVER if set.
+		if ( isset( $_SERVER['HTTP_AUTHORIZATION'] ) ) {
+			$request->add_header( 'Authorization', sanitize_text_field( wp_unslash( $_SERVER['HTTP_AUTHORIZATION'] ) ) );
+		}
+		
 		return $request;
 	}
 
@@ -452,6 +464,10 @@ public function test_request_header_requirements(): void {
 			'method'  => 'ping',
 		) ) );
 		$streamable_request->add_header( 'Content-Type', 'application/json' );
+		// Include authorization header from $_SERVER if set.
+		if ( isset( $_SERVER['HTTP_AUTHORIZATION'] ) ) {
+			$streamable_request->add_header( 'Authorization', sanitize_text_field( wp_unslash( $_SERVER['HTTP_AUTHORIZATION'] ) ) );
+		}
 		// Missing Accept header
 		$streamable_response = rest_do_request( $streamable_request );
 		$this->assertEquals( 400, $streamable_response->get_status(), 'Streamable should require Accept header' );
@@ -488,6 +504,10 @@ public function test_backward_compatibility_differences(): void {
 		) ) );
 		$streamable_request->add_header( 'Content-Type', 'application/json' );
 		$streamable_request->add_header( 'Accept', 'application/json, text/event-stream' );
+		// Include authorization header from $_SERVER if set.
+		if ( isset( $_SERVER['HTTP_AUTHORIZATION'] ) ) {
+			$streamable_request->add_header( 'Authorization', sanitize_text_field( wp_unslash( $_SERVER['HTTP_AUTHORIZATION'] ) ) );
+		}
 		$streamable_response = rest_do_request( $streamable_request );
 		$this->assertEquals( 400, $streamable_response->get_status(), 'Streamable should require strict JSON-RPC format' );
 	}