I've also implemented this in my Micropub server:
- when creating a post, and the
draft
scope is present, thepost-status
is forced todraft
(even if it's set otherwise in the post) - when updating a post, and the
draft
scope is present, the update is only allowed when updating adraft
post, otherwise returnsinsufficient_scope
- delete/undelete returns
insufficient_scope
when thedraft
scope is present