4 ms·

I see that you have a lot of scopes (https://github.com/difi/felleslosninger/blob/ad9ef79b4fef61f741cdfb296ac5f975167f81bf/_docs/ID-porten/oidc/oidc_protocol_sc

I see that you have a lot of scopes (https://github.com/difi/felleslosninger/blob/ad9ef79b4fef61f741cdfb296ac5f975167f81bf/_docs/ID-porten/oidc/oidc_protocol_scope.md https://github.com/difi/felleslosninger/blob/ad9ef79b4fef61f...). Especially from 3rd parties (https://integrasjon.difi.no/scopes/all https://integrasjon.difi.no/scopes/all https://integrasjon-ver2.difi.no/scopes/all https://integrasjon-ver2.difi.no/scopes/all) Do you have some statistics about that ? For instance, do you know how many scopes are usually requested, on average ?

magicalhippo 6y ago
Unfortunately not. We're just outsiders, using Maskinporten to get an auth token to be used against the REST API of some other gov't agency. For that we use one of two scopes, prod scope or test scope, as they (the agency we talk to) haven't narrowed it down further yet. But if you're interested maybe try to contact the Difi folks running Maskinporten, from my impression there's a high chance there's someone willing to share there. Maskinporten is being phased in as the primary M2M auth solution for any Norwegian gov't agency, so they're bound to get a lot more "users" (agencies), and hence scopes, going forward.