Update based on feedback

Author: localden

src/ModelContextProtocol/Authentication/AuthorizationDelegatingHandler.cs

@@ -71,13 +71,9 @@ private async Task<HttpResponseMessage> HandleUnauthorizedResponseAsync(
         }
         else
         {
-            // Try to find any matching scheme between server and provider using a HashSet for O(N) time complexity
-            // Convert the supported schemes to a HashSet for O(1) lookups
-            var supportedSchemesSet = new HashSet<string>(supportedSchemes, StringComparer.OrdinalIgnoreCase);
-            
             // Find the first server scheme that's in our supported set
-            bestSchemeMatch = serverSchemes.FirstOrDefault(scheme => supportedSchemesSet.Contains(scheme));
-            
+            bestSchemeMatch = serverSchemes.Intersect(supportedSchemes, StringComparer.OrdinalIgnoreCase).FirstOrDefault();
+
             // If no match was found, either throw an exception or use default
             if (bestSchemeMatch is null)
             {

src/ModelContextProtocol/Authentication/AuthorizationHelpers.cs

@@ -22,7 +22,8 @@ public static class AuthorizationHelpers
         using var httpClient = new HttpClient();
         try
         {
-            var response = await httpClient.GetAsync(metadataUrl, cancellationToken).ConfigureAwait(false);
+            var request = new HttpRequestMessage(HttpMethod.Get, metadataUrl);
+            var response = await httpClient.SendAsync(request, HttpCompletionOption.ResponseHeadersRead, cancellationToken).ConfigureAwait(false);
             response.EnsureSuccessStatusCode();
 
             var content = await response.Content.ReadAsStreamAsync().ConfigureAwait(false);