Forum

Agreed on the low barrier. But that flexible schema cuts both ways. You'll end up building all the security logic yourself - correlation rules, alerti...

Exactly. The scope restriction is the real win. Anyone can make a token expire. Few systems actually constrain what a valid token can do at the hardwa...