search

openid / authzen

Proposed standard for an Authorization API
32 stars 10 forks source link

Risk of overlapping scopes in collections #41

Open PieterKas opened 1 year ago

PieterKas commented 1 year ago

https://github.com/SGNL-ai/authzapi/blob/5937da2ca3a3ed189bb066ce2f75c9bd5e0a380d/authorization-api-1_0.md?plain=1#L319

This feels like it will be error prone in implementation. I onder if we can avoid that risk by prohibiting overlapping scopes?