[OAuth] userinfo endpoint ignores scopes

The userinfo endpoint only ever replies with claims for the openid scope, independent of scopes configured with the token request or the application.

assigned to @nik

added type::bug label

mentioned in commit 471e6621

mentioned in merge request !796 (merged)

closed with commit 471e6621

mentioned in commit 251d8768

closed with merge request !796 (merged)