Those extensions are good. I wanted an ext for personal usage that just removes scope at all - no big plans here.

My point is not just 'check this trick' but OAuth2 has no fixed-scope feature at all. You always have to check shit after user did something. This is just lifehack but i am interested in oauth2 spec overall