A Brief Understanding of API Authentication Scopes