I have a JWT that ORDS refuses with 401 and “invalid token”. I suspect this is because the scope claim is given as a JSON array, not a string of scopes separated with space. Dear PM, is this correct that ORDS will not validate a JWT where the scope claim is given as a JSON array? And it is possible that you will change ORDS to accept a JSON array in the future? Scope claim as a JSON array seems to be in breach with RFC 6749 section 3.3. But you could support it if you want :-) What are my chances?