I am running into a situation where scopes that have a colon in them (whatever:get) do not resolve on the authorize request when they get URL Encoded. I ran into this issue while trying to integrate swagger-ui with our oauth2 setup.
The swagger-ui project calls encodeURIComponent here when setting up the scope parameter which changes something like whatever:get to whatever%3Aget. When I send the encoded value to auth0, the requested scope value doesn’t come back when the parameter is url encoded.
I didn’t see anything about this in the docs, so I am not sure if this is an issue on the part of the URL encoding,something on the Auth0 end with string matching scopes, or another thing I maybe missing?
Thanks!