Below is my curl. I am firing /oauth2/token endpoint in my spring boot security application. So when I give proper scopes in the request body. I am getting same scopes in response as well as in access_token.