Skip to content

Commit 786cbdd

Browse files
authored
Update api-scopes.mdx (#576)
1 parent 1ec57fe commit 786cbdd

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

main/docs/get-started/apis/scopes/api-scopes.mdx

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
---
22
description: Understand the principle of scopes and how it is used with APIs.
33
title: API Scopes
4+
validatedOn: 2026-02-09
45
---
56
As an API developer, you need to:
67

@@ -48,9 +49,7 @@ Now, when the automated service calls your API, it will include a token which ve
4849

4950
## Limit API scopes
5051

51-
An application can include any scope defined for an API in its request. Instead of allowing all available scopes to be requested, however, you can limit scopes for certain users. For example, a user of your application can be given a role so that requests on their behalf are limited to just the scopes assigned to that role. To do this, you can [use the Authorization Extension](/docs/customize/extensions/authorization-extension) and create a custom rule. To learn more about Rules, read [Auth0 Rules](/docs/customize/rules).
52-
53-
To learn about this approach in more depth, read our [SPA+API Architecture Scenario](/docs/get-started/architecture-scenarios/spa-api/part-1). Specifically, you can review the [Configure the Authorization Extension](/docs/get-started/architecture-scenarios/spa-api/part-2#configure-the-authorization-extension) section to learn how to configure the Authorization Extension and create a custom Rule that will ensure scopes are granted based on a user's role.
52+
An application can include any scope defined for an API in its request. Instead of allowing all available scopes to be requested, however, you can control how applications access your APIs using [API access policies for applications](/docs/get-started/apis/api-access-policies-for-applications).
5453

5554
## Learn more
5655

0 commit comments

Comments
 (0)