Issue #3509299: Do return empty scopes directely when the grant type is...

Issue #3509299: Do return empty scopes directely when the grant type is refresh_token even no user identifier is provided

src/Repositories/ScopeRepository.php

@@ -61,7 +61,7 @@ class ScopeRepository implements ScopeRepositoryInterface {
     }
 
     $user = $userIdentifier ? $this->entityTypeManager->getStorage('user')->load($userIdentifier) : $default_user;
-    if (!$user) {
+    if (!$user && $grantType !== 'refresh_token') {
       return [];
     }