What probably matters to youSection of the release
The gateway's OIDC config schema gains a scope_on_refresh boolean option, sitting alongside existing settings like use_pkce and userinfo_fallback, to control whether scope is resent when a token is refreshed.
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed sinceAnthropic's documentation has since written up scope_on_refresh, on Claude apps gateway deployment and operations.| Log: `refresh failed request_id=<id>: invalid_token (…) (at userinfo_no_id_token, …)`, and developers see `Cloud gateway session expired` every `session.ttl_hours` | The IdP accepted the refresh token but returned no id\_token with it, s…claude-apps-gateway-deploysee the edit
How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agreesAnthropic's documentation has since written up scope_on_refresh, on Claude apps gateway deployment and operations.
