OAuth2 server scopes used when an authorization request omits the scope parameter
final List<String>? oAuth2ServerDefaultScopes;