How to add default custom scopes in password/authorization code grant?

[tyf]

Hey there @kpritam!

I believe TOKEN_DIALECT may be what you are after here - Please see the following post which outlines it’s use:

Scopes vs Permissions confusion

I would like to share some updates for the core authorization. We introduced TOKEN_DIALECT which helps to get the scopes in the Access Token based on the permissions assigned to the user either directly or through roles. When the RBAC feature is enabled along with token dialect for an API, the permissions which are allowed for the user and requested by the application will be inserted in the scope attribute of the issued Access Token. An app may request one or more permissions for a s…

Hope this helps!