The authorization and token endpoints allow the client to specify the scope of the access request using the “scope” request parameter. In turn, the authorization server uses the “scope” response parameter to inform the client of the scope of the access token issued. (RFC 6749: The OAuth 2.0 Authorization Framework)


Return to list of all ( OAuth Parameters | Web Concepts )