API Design · Middle · Question 34 of 75

What are OAuth scopes used for?

1Measuring token size
2Choosing the API version
✓Correct answer: Limiting what a token may do, e.g. orders:read but not orders:write

Explanation

Scopes express what the client is allowed to do on the user's behalf; the API still checks the user's own permissions.

Further reading

Test yourself

Take the API Design · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.