Scope

• Representation of a set of rights at a protected resource.

• Represented by strings and can be combined into a set of using a space-separated list

  • Scope value cannot contain a space character.

• Important mechanism limiting access granted to the client.

• Authorization Server can allow the Resource Owner to grant or deny particular scopes to a given client during its request.