Emelia Smith

I left a comment here about the automatic addition of charset=utf-8 on response's content-type headers on [this issue](https://github.com/rails/rails/issues/43728#issuecomment-2240700312) — I'm not sure it needs a separate issue as it doesn't...

This also means that you get the other configuration (scopes_supported & friends) from the IdP. I do note that some existing providers don't support discovery though (which is a shame)

Also this is still relevant, just to beat stalebot.

There's some debate of whether you can actually serve both S2S outboxes and C2S outboxes simultaneously, unless you do some negotiation based on the authentication presented. Basically if you do...

I think I can work on implementing this (already working on related things)

@dahlia on the API, I think we may want a catch-all route too "for all other activities do this"