allowedOauthScopes