Scopes requested during authorization. Defaults to openid profile offline_access (the last is what obtains a refresh token).
openid profile offline_access
final List<String> scopes;