v0.19.1
Bugfixes
-
When introspecting tokens, allow the introspected scopes to be a superset of required scopes.
A bug in the scope comparison code flipped the logic;
if a user consented to scopes A and B and the action provider required only scope A,
the comparison would fail as if A and B were required but only A had been consented to.This is now fixed.