Developer terms

Developers must request only necessary scopes, honor consent status and expiry, protect tokens, and use returned claims only for the stated purpose.