fix(oauth): request the scope named by the server's 401 Bearer challenge

fix(oauth): request the scope named by the server's 401 Bearer challenge #4110