fig5-2_OAuth-token-scopes