I am writing a desktop application (or several) to access mail, contacts and chat via the REST api (User-Agent Flow)
What are the correct and minimal scopes to use for each of these individually or for all three in one go?
I have found this page but it is not quite clear enough.
Current thoughts would be:
Is there any need for
Do I have to pass
refresh_token with everything or is it included in eg.
It says on the page that
id is implicit in everything so is there any need to send it?