The request may have one or more scope values indicating additional access requested by the application. The authorization server will need to display the requested scopes to the user. If there is more than one scope value, then they are separated by a space.