1. A method comprising: sending, from an application executing on a device associated with a user, through a Representational State Transfer (REST)-based interface, to an authorization computer system, a request for permission to access a scope of information associated with the user; based on authentication of the user associated with the device, receiving, at the device associated with the user, through the REST-based interface, from the authorization computer system, a request for consent by the user to allow the application to access information that is within the scope of information associated with the user; and responsive to the device receiving consent from the user, sending, from the device associated with the user, through the REST-based interface, to the authorization computer system, information indicating the consent to allow the application to access the information, wherein the authorization computer system stores a mapping between the application and the scope of information.