allowPushedAuthorizationRequestFallback

Allows browser-based authorization flows to fall back to the classic authorization URL when PAR is optional and unavailable/fails.

Disabled by default (fail-closed): a PAR failure surfaces as a thrown exception instead of silently downgrading to a request that omits PAR's protections. Set to true to allow that downgrade instead — the PAR failure's cause is not otherwise surfaced when it does.