OAuth scopes other than read, write, and follow do not work

[myConsciousness]

Hi amazing developers,

I'm trying OAuth 2.0 on mastodon, but if I use any scope other than read, write, follow, it's rejected during authentication.

For example, if I send a request with the following scope:

• read:accounts

Then I get an error message that requested scope is invalid.

I checked it works only with read, write, follow.

Are there special procedures required to use these less granular scopes?

[coderbarns]

Hi! For anyone facing this problem in the future, you need to specify the exact scopes you want available for your OAuth app during registration:

POST /api/v1/apps HTTP/1.1
scope='read write follow read:accounts'