Cool, so it would actually be considered a good practise to include both scopes and permissions in the same token and check them against each other.
Nice, thank you for your time to reply to all the questions 
1 Like