The specific permissions being requested from the authorization server.
The scope strings are specific to the authorization server and may be found in its documentation.
final List<String>? scopes;