MB-R322
The OAuth client only requests the required scopes (or other authorization parameters) in requests to the authorization server.