Scope: User should be able to grant scope to application

[DheerendraRathor]

This often happens that applications request scope which they don't actually use including private stuff about users. So this is a feature request that users should be able to select what scope they want to grant to that particular application, just like we see in facebook.

[aimestereo]

+1 What is the meaning of scopes if any app can request token with all privileges.

[DheerendraRathor]

I implemented a custom template to overcome this problem.

Relevant files are:

• https://github.com/DheerendraRathor/ldap-oauth2/blob/master/templates/oauth2_provider/authorize.html
• https://github.com/DheerendraRathor/ldap-oauth2/blob/master/static/oauth2_provider/js/authorize.js

[Soviut]

+1 Applications should have a scope field that specifies what scopes can be requested for each application.