Rich Authorization Requests Fail When Downstream Services Flatten the Details OAuth scopes are good at broad categories. They are poor at describing a specific transaction, such as a payment to one beneficiary, a transfer from one account, or a document export limited to a date range. RFC 9396 ...
Source: [Dev.to](https://dev.to/sorrelthorncroft/rich-authorization-requests-fail-when-downstream-services-flatten-the-details-3od)