As the product grows so does the number of entities, and permissions pool. The scopes are encoded in JWT and the web servers have a limit of 8kb ( going with least as of Node < 14 and default Tomcat limit ). What are some of the ways to bypass this. Are there any established ways to mapping or compressing scopes to avoid hitting the limit?
Have you had a chance to look into using RBAC? This might help cut down on scopes/permissions per token by having a collection of permissions under each role.