[oauth2] Exp claim mandatory (backport to v4.1.x]

[MarcialRosales]

Proposed Changes

Backport #16878 to v4.1.x

Types of Changes

What types of changes does your code introduce to this project?
Put an x in the boxes that apply

• Bug fix (non-breaking change which fixes issue #NNNN)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause an observable behavior change in existing systems)
• Documentation improvements (corrections, new content, etc)
• Cosmetic change (whitespace, formatting, etc)
• Build system and/or CI

[Zerpet]

@copilot why this PR didn't trigger a workflow run of .github/workflows/test-make.yaml ?

[Copilot]

@copilot why this PR didn't trigger a workflow run of .github/workflows/test-make.yaml ?

PR #16952 is currently in draft state. GitHub Actions does not trigger pull_request workflows on draft PRs by default — the test-make.yaml workflow's pull_request: trigger (with no types specified) only fires on the default activity types (opened, synchronize, reopened), and GitHub suppresses these events for draft PRs.

You can confirm this by checking the PR's check runs: only Mergify checks are present, with no test-make.yaml run.

To trigger the workflow, mark the PR as Ready for review. That will fire the ready_for_review activity type (and subsequent pushes will trigger synchronize events normally).