v1.3.5
Fixes the DevTools OAuth flow against a hosted authorization server (WorkOS AuthKit, Auth0, Clerk, Stytch). DevTools sent its x-forwarded-* headers on the cross-origin discovery, registration and token requests too, so the browser preflighted them and the flow stopped at .well-known/openid-configuration.