OAuth 2.0 Scopes enforcement on APIs
slashid.dev