🎯
Scope
Authorization
Authorization constraint defining the permissions encoded in a token; should be minimal and explicit.
Definition
Scopes define what an access token permits (e.g., read vs write, specific resources). Well-designed scopes support least privilege and transparent consent.
In plain English
Authorization constraint defining the permissions encoded in a token; should be minimal and explicit.
Why this matters
Why it matters: Over-broad scopes increase privacy risk and expand the impact of token theft.
Example
Example: Use granular scopes like “calendar.read” instead of “calendar.*”, and present them clearly to users.