Storing and Reusing OAuth Bearer Tokens in WordPress: Transients, Token Refresh, and the Scope Bug

A developer posted on the WordPress forums that they were trying to implement a two-step OAuth flow against a Telco API for phone number validation. The API first issues a Bearer token via a Client Cr