OAuth 2.0 Authorization Server and Hostnames

When building a Custom GPT Action and using OAuth, there is a check that its doing to ensure that the API hostname is the same as the authorization server hostname.

In many cases, the auth server may be different from the api its protecting. For example, if using Auth0, a paid plan must be used to get a custom domain.

Is there a reason for this check, is there a way around it?