Web Development
Intermediate
What is OAuth Scope?
A mechanism in OAuth that limits an application's access to a user's account to specific resources or actions.
Scopes define the level of access an application requests. For example, a GitHub app might request read:user (read profile) and repo (access repositories) scopes. Users see what access they are granting during authorization.
Scopes follow the principle of least privilege — applications should request only the minimum access needed. Common scope patterns include read/write separation, resource-specific access, and admin-level permissions.