mod_http_oauth2: Enforce client scope restrictions in authorization When registering a client, a scope field can be included as a promise to only ever use those. Here we enforce that promise, if given, ensuring a client can't request or be granted a scope it didn't provide in its registration. While currently there is no restrictions at registration time, this could be changed in the future in various ways.

body {
  margin: 0
}

a {
  color: #0000FF
}

ul {
  margin: 0
}

.btn {
  margin-right: 0.3em
}

.btn:last {
  margin-right: 0
}

#main {
  padding: 10px
}

#main div {
  margin-left: 14px
}

#main p {
  margin-left: 14px
}

#top {
  clear: both;
  width: 100%;
  padding: 0;
}

#header {
  height: 172px;
  background: url(../images/tile.png) repeat-x
}