release/version-27.1-rc.3
main
The third release candidate carries #143: directory setup asks an OpenID Connect provider's client ID as the audience, and the security page flags OpenID Connect directories that accept other apps' tokens.