Learn from practical examples on how OAuth 2.0 scopes and JWT claims control what data and actions applications can access on behalf of users.