I noticed that in model for Scopes in Identity Server 3, there is a claims inside the scope.
But, I did not notice this in the spec for OAuth.
1. Is this something specific to Identity Server 3 or actually stated in the spec?
2. Since claim can be anything, including role, does this actually makes authorization model more granular in OAuth?
Go to the complete details ...