OAuth2: Why does OAuth2.kt not use the return value from the NonceManager verify method? : https://github.com/ktorio/ktor/blob/main/ktor-features/ktor-auth/jvm/src/io/ktor/auth/OAuth2.kt#L170

Thank you for the information. Indeed that's weird. I've created an issue KTOR-3091.