Return 401 for expired OAuth access tokens#768

Merged

rickyrombo merged 2 commits intomainfrom

mjp-oauth-expired-token-401

Apr 17, 2026

Commits on Apr 17, 2026

Return 401 for expired OAuth access tokens

rickyrombo
and
claude
committed
Distinguish invalid bearer (401) from valid-but-mismatched (403)

rickyrombo
and
claude
committed