Under the hood
Server auth errors are now classified into specific denial reasons like token_revoked or org_access_revoked
What
A new classifier reads a server error message and sorts it into one of several specific reasons: org_access_revoked, workspace_revoked, token_revoked, token_expired, token_invalid, application_deactivated, credential_invalid, or other. This populates a new serverAuthDenial telemetry field whenever a server authentication or permission error occurs without an explicit error code already attached.
Why
This gives more specific information about why a server rejected a request for authentication or permission reasons, instead of lumping all such failures together.