@Override
    public Set<String> getScopes() {
        return ObjectUtils.defaultIfNull(this.scopes, new HashSet<>());
    }
The authenticated object for which this ticket was generated for.
support/cas-server-support-oauth-core-api/src/main/java/org/apereo/cas/ticket/BaseOAuth20Token.java