問題文
A server implements a minimal initial scope and elevates on demand. Which cost does the specification acknowledge for that design?
選択肢
- Hierarchical scopes cannot be used, and a server has to name every individual scope it wants in the challenge that it returns to the client.
- Down-scoped tokens must be rejected, and a client that receives fewer scopes than it asked for has to abandon the request that it just made.
- Each elevation costs an authorization round trip, so challenging one scope at a time degrades user experience.
- The client cannot accumulate scopes across operations, so each elevation replaces the previous grant and the user has to re-consent to permissions they already gave.