Supplying scope is not allowed when obtaining an access token with an authorization code. Some non-compliant providers do require the scopes.