revoking app authorizations

[elf-pavlik]

I haven't seen yet conversations about revoking authorizations person grants for specific app. I think we should consider full flow which includes both granting, expanding grants as needed, making them more restrictive as needed and revoking all together.
Having app authorizations scattered across lots of different resource servers would require that person has at least some index where all those authorizations get tracked. Otherwise I don't see clear way to manage them so also revoke them.
I'll think of some use cases that include revoking app authorizations.

[zenomt]

the scheme described in #48 stores the user's app authorization choices in the user's storage, and would allow the user to audit, modify, and remove app authorizations.

[elf-pavlik]

https://solid.github.io/data-interoperability-panel/specification/#authorizations provides End-user centric approach which addresses this issue.