Angular SPA Template with Individual Auth doesn't work when the project name contains spaces about templates HOT 2 OPEN

I can verify that if I visit /.well-known/openid-configuration that the scopes_supported array includes a Test ProjectAPI scope.

{
    "scopes_supported": [
        "openid",
        "profile",
        "Test ProjectAPI",
        "offline_access"
    ]
}

I'm not sure if OpenID Connect scopes can contain spaces. If scopes can be quoted in the request, they likely can, but I'm not sure how the specification reads. If scopes can contain spaces, the error is in the client (the scope needs to be quoted). If scopes cannot contain spaces, the error is in the server (the scope needs an underscore instead of a space).

from templates.

According to OAuth 2.0 RFC6749 Section 3.3:

The value of the scope parameter is expressed as a list of space-delimited, case-sensitive strings. The strings are defined by the authorization server. If the value contains multiple space-delimited strings, their order does not matter, and each string adds an additional access range to the requested scope.

scope       = scope-token *( SP scope-token )
scope-token = 1*( %x21 / %x23-5B / %x5D-7E )

It explicitly defines that scopes cannot contain spaces (%x20 = ) and that scopes cannot be quoted (%x22 = ").

Therefore, the error is in the server-side implementation. It should not allow a scope that contains a space. It should either throw an error, or replace the space with an underscore. If the space is allowed in the scope, the server will not be fully OAuth 2.0/OpenID Connect 1.0 compliant.

from templates.