Grant management API scopes not established on application registration

What’s happening

The grant management API scopes (e.g. openfeed-au:grant:self:revoke) are not included in the scope set established at application registration. This is a known restriction of the current registration flow. Without these scopes, clients cannot authenticate against the grant management endpoints.

Impact

Applications that use the grant management API to list or revoke active grants programmatically cannot do so through the openfeed platform at this time.

Workaround

Applications should direct users to manage and revoke their grants directly through the openfeed platform at app.openfeed.au/applications.

Current status

openfeed is currently planning the changes required to support these grant management API scopes. This page will be updated when a timeline is established.