The [authentication docs](https://api.stackexchange.com/docs/authentication) state that the [`scopes` parameter](https://api.stackexchange.com/docs/authentication#scope) of the URL to which a user should be directed to, for implicit authentication, should be a list of scopes that are delimited by either commas or spaces.

While both delimiting options worked with the old one, **delimiting with commas doesn't work with the new authentication dialog**.

When delimited with commas (as `scope=read_inbox,no_expiry,write_access,private_info`) or by the HTML-encoded `,` character `%2C`, the authentication dialog reads,

![](https://i.imgur.com/adb1TZk.png)

When delimited with spaces (as `scope=read_inbox no_expiry write_access private_info`), it reads,

![](https://i.imgur.com/HiNXIze.png)