2026-05-09 UTC
# 
simpleauthority Hello all, I'm doing the micropub.rocks tests on my micropub server and the test for "Rejects unauthorized access tokens" requires the endpoint to return 401. However, in this case, the spec requires 403 since the token is valid but simply does not have the correct scope. Is this test outdated for the spec?