Scope property mapping in GetOpenIdConnectConfigurationAsync

src/Duende.AccessTokenManagement.OpenIdConnect/OpenIdConnectClientConfiguration.cs

@@ -1,6 +1,7 @@
 // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 
+using System.Collections.Generic;
 using System.Net.Http;
 
 namespace Duende.AccessTokenManagement.OpenIdConnect;
@@ -44,4 +45,9 @@ public class OpenIdConnectClientConfiguration
     /// The scheme name of the OIDC handler
     /// </summary>
     public string? Scheme { get; set; }
+
+    /// <summary>
+    /// Gets the list of permissions to request.
+    /// </summary>
+    public ICollection<string> Scope { get; set; } = new HashSet<string>();
 }

src/Duende.AccessTokenManagement.OpenIdConnect/OpenIdConnectConfigurationService.cs

@@ -78,6 +78,8 @@ public async Task<OpenIdConnectClientConfiguration> GetOpenIdConnectConfiguratio
             ClientId = options.ClientId,
             ClientSecret = options.ClientSecret,
             HttpClient = options.Backchannel,
+
+            Scope = options.Scope
         };
     }
 }

src/Duende.AccessTokenManagement.OpenIdConnect/UserTokenEndpointService.cs

@@ -64,7 +64,8 @@ public async Task<UserToken> RefreshAccessTokenAsync(
             ClientId = oidc.ClientId!,
             ClientSecret = oidc.ClientSecret,
             ClientCredentialStyle = _options.ClientCredentialStyle,
-
+            Scope = string.Join(" ", oidc.Scope),
+
             RefreshToken = refreshToken
         };