Respect explicitly passed scopes on refresh

src/Duende.AccessTokenManagement.OpenIdConnect/UserTokenEndpointService.cs

@@ -69,7 +69,12 @@ public async Task<UserToken> RefreshAccessTokenAsync(
         };
 
         request.Options.TryAdd(ClientCredentialsTokenManagementDefaults.TokenRequestParametersOptionsName, parameters);
-
+
+        if (!string.IsNullOrWhiteSpace(parameters.Scope))
+        {
+            request.Scope = parameters.Scope;
+        }
+
         if (!string.IsNullOrEmpty(parameters.Resource))
         {
             request.Resource.Add(parameters.Resource);