blog/implementing-end-user-oauth-identity-passthrough-for-remote-mcp-servers.html