Web Security · Middle · Question 54 of 75
What are OAuth scopes?
- ✓Correct answer: The permissions a client asks for, such as
read:email, which limit what the access token can do - 2The CSS rules of the login page
- 3The list of users allowed to log in
Explanation
Request the smallest set of scopes the feature needs. Users are more likely to approve, and leaked tokens do less damage.