2021-11-06 UTC
# 
Zegnat Hmm, I guess that is some sort of usage narrowing then. A token without scopes does not grant you any priveledges. So it to me maps to an identity token. If the token does nothing other than showing your identity to me, I am not sure I will ever care on which URL you are telling me your identity. So I guess I wouldn’t immediately think to get a resource associated with it.