Files
gbrain/test
Garry TanandClaude Fable 5 8f36b0cb0c merge: #2009 fix(oauth): default omitted authorize scope to client's full registered grant
Reviewed (A6): omitted/empty scope both safely default to the client's
REGISTERED scope and stay clamped to it (no escalation); fixes the empty-grant
that never self-heals. Verified the result can't exceed allowedScopes.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-06-11 22:33:16 -07:00
..