Get hands-on experience with 20+ free Google Cloud products and $300 in free credit for new customers.

Application level scopes with multiple products

In the use case of having one proxy with a resource that has multiple verbs:

GET person

POST person

If I have two different applications:

app1 should only be able to use GET person

app2 should only be able to use POST person

Is it a best practice to use two products that both have the same proxy endpoint (Person),

But one has PERSON_READ scope, and the other has PERSON_WRITE scope,

So when using client credential, and oauth validation policy, it will have the right scope?

1 4 797
4 REPLIES 4