Which providers have mandatory scopes?

Some providers require specific scopes, and authentication fails with an insufficient or missing scopes error if they aren't granted.

Some providers require specific scopes, and authentication fails with an insufficient or missing scopes error if they aren't granted. Known requirements:

• Oura: email, personal info, and tags scopes (email verifies subscription status).

• Google Fit: the calendar scope (used to determine timezone).

• Fitbit: profile and settings scopes.

• Strava: fails if any scope is left unselected.

• Garmin and Withings: no mandatory scopes.

The scopes a user actually granted are returned in the auth success webhook payload.