OAUTH 2.0 OAUTH SCOPE

 https://docs.github.com/en/apps/oauth-apps/building-oauth-apps/scopes-for-oauth-apps

https://oauth.net/2/scope/

Scopes let you specify exactly what type of access you need. Scopes limit access for OAuth tokens. They do not grant any additional permission beyond that which the user already has.

$ curl -H "Authorization: Bearer OAUTH-TOKEN" https://api.github.com/users/codertocat -I
HTTP/2 200
X-OAuth-Scopes: repo, user
X-Accepted-OAuth-Scopes: user

• X-OAuth-Scopes lists the scopes your token has authorized.
• X-Accepted-OAuth-Scopes lists the scopes that the action checks for.