take special care in parsing the field value, as it might contain more than one challenge, and each challenge can contain a comma-separated list of authentication parameters. ASIS www-authenticate: Bearer scope="" error="invalid_token" error_description="the token has expired" TOBE www-authenticate: Bearer scope="", error="invalid_token", error_description="the token has expired"