scope

This article is a stub. You can help the IndieWeb wiki by expanding it with relevant information.

In OAuth terminology, scope is a way to limit what parts of your account are accessible by third-party applications.

For example, you can choose to allow one application to read your basic profile info, while another application may be authorized to post on your behalf.

Micropub Scopes

Micropub clients use scopes to indicate what permissions they are requesting from Micropub servers, which will result in the user seeing the listed scopes in the authorization prompt. Clients and servers must agree on the names and expected behavior of a list of scopes in order to provide a consistent user experience among apps.

Listed below are the currently supported Micropub scopes across most clients and servers.

• create - allows the client to create posts on behalf of the user
• draft - (proposed) allows the client to create draft posts only on behalf of the user (requested in lieu of create scope)
• update - allows the client to edit existing posts
• delete - allows the client to delete posts
• media - allows the client to upload files to the media endpoint

These are distinct permissions, so e.g. granting a client only "create" scope means it will not be able to update or delete existing posts.

Most servers allow clients with the create scope to also allow uploading to the media endpoint. The media scope can be used to allow clients to only upload to the media endpoint without being able to also create posts.

Use the sections below to document additional experimental scopes that software has implemented, and once there are two or more clients and servers that support the additional scopes, they can be added to the registry above.

Scopes supported by Micropub clients

• Quill requests the "create" and/or "update" scope when authorizing it to create posts on your domain.
• OwnYourGram requests the "create" scope when authorizing it to create photo posts on your domain.
• Micropublish.net requests the scopes "post" or "create update delete undelete", for the user to choose, and has the option to select "draft" scope
• Indigenous requests the "create", "update" and "delete" scopes when logging in to the app.
• indiebookclub requests the "create" scope.
• Indiepaper requests the "create", "update", and "save" scopes when logging in.
• Micro.blog requests the "create" scope.
• Sunlit requests the "create" scope.
• www-editor.jvt.me requests the "create update delete undelete" scopes

Scopes supported by Micropub servers