Scopes

Understand available scopes and what data each scope provides access to.

Scopes define the level of access your application requests from users. Request only the scopes you need for your application to function. Users see what permissions you're requesting and can deny access to specific scopes.

openid

Required for OpenID Connect. Cengel ID always includes this automatically.

Provides: Subject identifier (sub claim) in ID token

profile

Access to basic profile information.

Provides: displayName, username, avatar, about

email

Access to user's email address and verification status.

Provides: email (username and domain), isVerified

details

Access to detailed profile information.

Provides: website, location, birthDate

phone

Access to user's phone number and verification status.

Provides: phone number, phone verification status

social

Access to user's social media links.

Provides: socialLinks (array of platform, url, label objects)

Requesting Scopes

Include the scopes you need in the authorization request as a space-separated list:

scope=openid profile email

If you don't specify a scope, Cengel ID grants onlyopenid.