Use it now
Gateway OIDC config gains an option to control whether scope resends on token refresh.
The gateway's OIDC config schema gains a scope_on_refresh boolean option, sitting alongside existing settings like use_pkce and userinfo_fallback, to control whether scope is resent when a token is refreshed.
Names in the bundlescope_on_refresh
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed since
Anthropic's documentation has since written up scope_on_refresh, on Claude apps gateway deployment and operations.
| Log: `refresh failed request_id=<id>: invalid_token (…) (at userinfo_no_id_token, …)`, and developers see `Cloud gateway session expired` every `session.ttl_hours` | The IdP accepted the refresh token but returned no id\_token with it, s…claude-apps-gateway-deploy see the edit
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agrees
Anthropic's documentation has since written up scope_on_refresh, on Claude apps gateway deployment and operations.