问OpenIddict: options.DisableScopeValidation()不禁用范围验证

EN

// OpenIddict
builder.Services.AddOpenIddict()
    .AddCore(options =>
    {
        options.UseEntityFrameworkCore().UseDbContext<ApplicationDbContext>();
    })
    .AddServer(options =>
    {
        // Flow
        options
        .AllowAuthorizationCodeFlow().RequireProofKeyForCodeExchange()
        .AllowClientCredentialsFlow()
        .AllowRefreshTokenFlow();

        options.SetAuthorizationEndpointUris("/connect/authorize"); // Ni flow yang user login kt VentureAuth.
        options.SetTokenEndpointUris("/connect/token"); // Token Endpoint: Clients nak mintak token, mintak kat sini.
        options.SetUserinfoEndpointUris("/connect/userinfo");

        // Can disable access token encryption if want to read access token
        // https://dev.to/robinvanderknaap/setting-up-an-authorization-server-with-openiddict-part-iii-client-credentials-flow-55lp
        options
            .AddEphemeralEncryptionKey()
            .AddEphemeralSigningKey()
            .DisableAccessTokenEncryption();

        //options.RegisterScopes("api");

        options
            .UseAspNetCore()
            .EnableTokenEndpointPassthrough()
            .EnableAuthorizationEndpointPassthrough()
            .EnableUserinfoEndpointPassthrough();

        options.DisableScopeValidation();

    });

error:invalid_request
error_description:This client application is not allowed to use the specified scope.
error_uri:https://documentation.openiddict.com/errors/ID2051