Module scopes 

OAuth 2.0 scope definitions and parsing for AT Protocol. AT Protocol OAuth scopes module

This module provides comprehensive support for AT Protocol OAuth scopes, including parsing, serialization, normalization, and permission checking.

Scopes in AT Protocol follow a prefix-based format with optional query parameters:

• account: Access to account information (email, repo, status)
• identity: Access to identity information (handle)
• blob: Access to blob operations with mime type constraints
• repo: Repository operations with collection and action constraints
• rpc: RPC method access with lexicon and audience constraints
• atproto: Required scope to indicate that other AT Protocol scopes will be used
• transition: Migration operations (generic or email)

Standard OpenID Connect scopes (no suffixes or query parameters):

• openid: Required for OpenID Connect authentication
• profile: Access to user profile information
• email: Access to user email address

Structs

AccountScope

Account scope attributes

BlobScope

Blob scope with mime type constraints

RepoScope

Repository scope with collection and action constraints

RpcScope

RPC scope with lexicon method and audience constraints

Enums

AccountAction

Account action permissions

AccountResource

Account resource types

IdentityScope

Identity scope attributes

MimePattern

MIME type pattern for blob scope

ParseError

Error type for scope parsing

RepoAction

Repository actions

RepoCollection

Repository collection identifier

RpcAudience

RPC audience identifier

RpcLexicon

RPC lexicon identifier

Scope

Represents an AT Protocol OAuth scope

TransitionScope

Transition scope types