Closed
Description
We should require an OAuth access token with a certain scope to call each Jans Eleven endpoint (and perhaps specific to each method). There can be general scopes like sign, encrypt, create or more specific scopes. OAuth protection should be configurable (i.e. to enable people to shut it off), or to map other scope requirements.