Customizing scopes in the OAuth app authorization flow

This post details how developers can further customize requested OAuth scopes beyond the maximum enabled scopes by using the `scope` parameter to specify a subset of scopes and the `include_granted_scopes` parameter to incrementally add new permissions during the authorization flow. It explains how these parameters affect the granted scopes in the token payload and the implications for app developers and user privacy.