← Back to Baseline

MB-R255

HUMAN VERIFICATION REQUIRED ASVS 10.4.11 Least OAuth scopes (when oauth_oidc is used)

MB-C16 ASVS Level 2 Contextual Human Assurance High

The authorization server configuration only assigns the required scopes to the OAuth client.