OAuth scopes only work for client_credentials flow
>>> [!note] Migrated issue
<!-- Drupal.org comment -->
<!-- Migrated from issue #3566458. -->
Reported by: [mglaman](https://www.drupal.org/user/2416470)
Related to !491
>>>
<h3 id="overview">Overview</h3>
<p>The `canvas:asset_library` and `canvas:js_component` scopes do not support `authorization_code`. </p>
<h3 id="proposed-resolution">Proposed resolution</h3>
<p>Allow these, so that PKCE OAuth flows via the CLI or AI agents is allowed</p>
<h3 id="ui-changes">User interface changes</h3>
issue