We have an oauth app that includes the scopes we need in order to access meeting recordings, etc.
But we’re considering a change to our approach of authenticating users to allow them to authenticate with minimal scopes (just user info) to begin, and later the user can explicitly allow us to access more sensitive scopes (recordings) later.
The OAuth standard designates that you can send the scopes in the auth code request, which would allow us to do this… But the docs for Zoom don’t mention this parameter, and users always allow all of the scopes listed for the app.
Is there an undocumented way to do progressive permissions?
