This is a contributors guide and NOT a user guide. Please visit these docs if you are using or evaluating SuperTokens.

Store a global list of scopes that can be enabled per client

This is just a proposal so far, it hasn't been accepted and needs further discussion.

Context and Problem Statement#

We want to add a list of enabled scopes to each client.

Chosen option: Store a global claim list and reference it in clients

As per this decision, there are some reserved scopes, and a default openid scope.
The "openid" scope will be allowed by default for all clients without adding it manually (and keeping it if it was added manually)
- It'll not be added however to tokens/auth codes if the user hasn't requested this scope

Creating and enabling scopes is a single step

Prevents typos when creating multiple clients