On the Nature of OAuth2’s Scopes
auth0.com