scopes

[michielbdejong]

I'm trying to fill in the step where the user is asked to confirm scopes, which is currently being skipped.
I'll send a PR when I get it working :)

[michielbdejong]

Trying to wrap my head around this (learning as I go along here)

• authorize redirects to login if the user is not logged in
• login redirects (back) to authorize if login is successful
• authorize redirects to scopes if the request is not authorized
• this depends on the function getIsAuthorizationApprovedFromSession which is yet to be implemented

[michielbdejong]

I guess it's safe to store the accept yes/no decision in a cookie