2024-08-05 UTC
# 
[schmarty] I defer to spec writers like aaronpk but my read on that spec link above is that codes requested with scope=profile can be redeemed at the authorization endpoint to get a "me" and a "profile". No token is issued so the token endpoint isn't responsible. 🤷♂️