> "What's nice about OAuth is that it allows the end user to control access to information and revoke access as needed." Really? This has NEVER been my experien

> "What's nice about OAuth is that it allows the end user to control access to information and revoke access as needed." Really? This has NEVER been my experience with OAuth or similar protocols Github is a great example of handling OAuth scopes: https://developer.github.com/v3/oauth/#scopes https://developer.github.com/v3/oauth/#scopes (you're right that it's often not used, though. I tried bitbucket and gitlab and both appear to only have a single scope)