The interceptor already copies preferred_username; the test now checks it. Co-authored-by: Cursor <cursoragent@cursor.com>
Microservices can forward the raw bearer from the interceptor context. Co-authored-by: Cursor <cursoragent@cursor.com>