Australian National University · OAuth Scopes

Australian National University OAuth Scopes

OAuth 2.0 probed

Australian National University uses OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (e.g. client-credentials or role-based authorization) rather than per-scope consent.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

UniversityHigher EducationEducationResearchAustraliaGroup of EightResearch RepositoryIdentity FederationOpen AccessQuantumRandom NumbersOAI-PMH
Scopes: 0 Flows: Method: probed

Scopes (0)

Australian National University implements OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (client-credentials or role-based authorization) rather than per-scope consent.

ANU exposes NO scoped authorization on any institution-operated API surface. This file records that absence with the probes that established it, rather than being omitted — an absent scopes file reads as "not looked at", and this was looked at. The AQN API is a single-key, single-operation service: one static x-api-key grants the one GET it offers, with no scope parameter, no consent screen and no partial grant. The legacy QRNG endpoint and the OAI-PMH endpoint are unauthenticated. The only OAuth2 token endpoint anywhere on an ANU host is the LTI 1.3 platform token endpoint inside Moodle (https://wattlecourses.anu.edu.au/mod/lti/token.php), which issues tokens against IMS Global LTI Advantage service scopes to registered LTI tools — not to outside developers, and not through any public client-registration path.

📄 Provider scope reference:

Source

OAuth Scopes

Raw ↑ 
generated: '2026-08-19'
method: probed
source: https://api.quantumnumbers.anu.edu.au
x-operator: institution
note: >-
  ANU exposes NO scoped authorization on any institution-operated API surface. This file
  records that absence with the probes that established it, rather than being omitted — an
  absent scopes file reads as "not looked at", and this was looked at.


  The AQN API is a single-key, single-operation service: one static x-api-key grants the one
  GET it offers, with no scope parameter, no consent screen and no partial grant. The legacy
  QRNG endpoint and the OAI-PMH endpoint are unauthenticated. The only OAuth2 token endpoint
  anywhere on an ANU host is the LTI 1.3 platform token endpoint inside Moodle
  (https://wattlecourses.anu.edu.au/mod/lti/token.php), which issues tokens against
  IMS Global LTI Advantage service scopes to registered LTI tools — not to outside developers,
  and not through any public client-registration path.
schemes: []
scopes: []
negative_probes:
- url: https://api.quantumnumbers.anu.edu.au/
  status: 403
  finding: '{"message":"Forbidden"} — gateway key check only; no OAuth challenge, no WWW-Authenticate scope hint.'
- url: https://www.anu.edu.au/.well-known/openid-configuration
  status: 404
  finding: No OIDC discovery document on the institutional domain.
- url: https://wattlecourses.anu.edu.au/.well-known/openid-configuration
  status: 404
  finding: No OIDC discovery document on the LMS host either; the LTI endpoints are not advertised via .well-known.
- url: https://developer.anu.edu.au/
  status: 000
  finding: Host does not resolve. No developer portal exists at the conventional address.
- url: https://api.anu.edu.au/
  status: 000
  finding: Host does not resolve. There is no central institutional API gateway.