OAuth 2.0 Scope String Syntax & Granularity Auditor
Audits space-delimited OAuth 2.0 scope strings for least-privilege permission structure.
Notice: engineering verification utility. Use test or de-identified data and verify results independently before relying on them.
How it works
Standard: RFC 6749 OAuth 2.0 Authorization Framework
Formula: Space or colon separated permission scope tokens validation
Checks: Non-empty scope string
Calculated locally in browser memory; nothing leaves your browser.
Deterministic local-first client-side execution. Provided as-is without warranty.