myndocs/kotlin-oauth2-server

Assumptions on request scopes behavior

adhesivee opened this issue · 0 comments

CallRouterAuthorize is making the assumption, that if no scopes are provided that all scopes should be requested.

This is up to the implementor how to act on this.