Naming standard for Oauth scopes

[cliftonc]

We need to agree a convention for the naming of the oauth scopes in use by the services.

My recommendation for discussion:

https://stichtingsem.org/.well-known/scopes/las.user-identification

Rationale:

• The first part is simply the base (leveraging existing .well-known) semantic for OpenID Connect.
• The final part is the specific scope used by a service.
• Because it is a URL we can add documentation to that URL to describe it.
• The actual scope is namespaced to:
  • [service].[data]
  • las.user-identifcation
  • mp.entitlements
  • la.results
  • la.usage

[cliftonc]

@mcginkel @EvanderVeen what are your thoughts?