2025-11-02 UTC
# 
[schmarty] second i am much less sure about, but it would be something like "rescuing" a request that looks like an invalid request for a token with empty scopes to treat it instead as if it was being handled by the old auth server behavior?