4 ms·

basically provider could just return 'scope' for 'token' when you obtain it with 'code' along with 'expire_at' parameter