I agree, you should get a 400 error - the scope will never be honored in conjuction with OAuth (just like with trusts).
I agree, you should get a 400 error - the scope will never be honored in conjuction with OAuth (just like with trusts).