OWASPASVS 5.0 requirement
ASVS-V10.4.11 The authorization server configuration only assigns the required scopes to the oauth client.
- Standard
- OWASP ASVS 5.0
- Chapter
- V10 OAuth and OIDC
- Section
- V10.4 OAuth Authorization Server
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that the authorization server configuration only assigns the required scopes to the OAuth client.