{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "title": "OAuth authorization and scopes evaluation inputs",
  "description": "Evaluate how redirect binding, PKCE verification, code lifetime and requested scope determine an authorization exchange.",
  "type": "object",
  "required": [
    "redirect_matches",
    "verifier_matches",
    "code_used",
    "requested_scope"
  ],
  "properties": {
    "redirect_matches": {
      "type": "boolean",
      "description": "Exact registered redirect comparison result."
    },
    "verifier_matches": {
      "type": "boolean",
      "description": "PKCE verification result computed by the authorization server."
    },
    "code_used": {
      "type": "boolean",
      "description": "Whether the authorization code has already been consumed."
    },
    "requested_scope": {
      "type": "array",
      "description": "Scopes requested by the client.",
      "items": {
        "type": "string"
      }
    }
  },
  "additionalProperties": false
}