Read granted scopes in OAuth token responses

OAuth token responses now include a space-separated scope value showing the permissions granted to the access token. Read and store this value after a code, device, or refresh-token exchange so your integration can use the permissions the token actually has.

See the OAuth and OpenID Connect guide for token exchange and scope guidance.