2025-02-14 UTC
# 
[snarfed] hey [aaronpk], another modern OAuth question. if a client wants a certain set of scopes, and it starts an OAuth flow with a server, and it notices that the server doesn't support some of those scopes (eg in its `scopes_supported` metadata field)...is the client expected to short circuit and tell its user, sorry, this server can't do what you want?