Update or Insert Scope

POST 
/scopes-srv/scope

This API call enables the creation and updating of a scope and its subsequent addition to the resource protection, where necessary.

Note: This API is not allowed to create cidaas: scopes. If securityLevel is not specified, it defaults to "PUBLIC" for newly created scopes. The service always sets scopeOwner to CLIENT on upsert (the request field is not honored).

Scopes are relevant for:

• Managing permissions: Scopes can be used to secure your endpoints. The access token must contain the particular scope to be authorized.
• Controlling the user profile data returned in id_token and userinfo endpoint

Request

Responses

200

OK

204

No content

400

Invalid JSON request body

401

Unauthorized

409

Conflict

417

Empty scopeKey, reserved cidaas: scope prefix, or other validation rejected by the scopes service