Currently, authorized scopes are hard coded. These should come from either a configuration file (mapping identifier to scope) or the environment. Not sure this will make things better right now but it will make things easier to fix if there is a mismatch between the code and auth0.
Currently, authorized scopes are hard coded. These should come from either a configuration file (mapping identifier to scope) or the environment. Not sure this will make things better right now but it will make things easier to fix if there is a mismatch between the code and auth0.