← Back to Baseline

MB-R322

HUMAN VERIFICATION REQUIRED ASVS 10.2.3 Client scope minimization (when oauth_oidc is used)

MB-C18 ASVS Level 3 Human Assurance High

The OAuth client only requests the required scopes (or other authorization parameters) in requests to the authorization server.