Scopes are not added to (client credentials) access token

Openiddict.AspNetCore (3.0.0-beta6.20527.75)

How to reproduce issue

1. Add client application to openiddict server and add a few custom scopes.
2. Fetch the (client credentials) access token, by calling /connect/token

curl --location --request POST 'https://localhost:5000/connect/token' \
--header 'Authorization: Basic myclientid:myclientsecret' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'grant_type=client_credentials' \
--data-urlencode 'client_id=myapp' \
--data-urlencode 'scope=account account.read account.write'

1. Call a web api using the access token, and debug the claims, look for scopes (scopes are missing, no scopes are added to the access token by default?)

[kevinchalet]

That’s the expected behavior (and pretty much the reason why OpenIddict uses its own private scopes claims: we don’t have to split a unique scope value each time we want to work with them)

[hypdeb]

Thank you for the answer. I won’t pretend I understood all of it, but I now know what I have to do with more confidence.