allowedOAuthScopes