In the use case of having one proxy with a resource that has multiple verbs:
GET person
POST person
If I have two different applications:
app1 should only be able to use GET person
app2 should only be able to use POST person
Is it a best practice to use two products that both have the same proxy endpoint (Person),
But one has PERSON_READ scope, and the other has PERSON_WRITE scope,
So when using client credential, and oauth validation policy, it will have the right scope?