What is the Difference Between Scopes and Additional Scopes for Custom OAuth Clients?

This topic was automatically generated from Slack. You can find the original thread here.

Hey guys, what is the difference for custom oauth clients between scopes and additional scopes?

not sure-- maybe scopes are required and default when the user signs in, and ‘additional scopes’ are optional for the user to select whether to enable/disable? no idea honestly tho id test it

i think it’s intended to be that additional scopes are the extra ones you can add per app, but scopes are the ones actually in effect

Yea that UX needs to be improved. For Slack specifically, we send the Scopes input as the scope param, which they use for the bot token. And for Additional Scopes, we send as the user_scope param, which are used for the user token.

Oh I see that makes sense! Thanks for clarifying