@Override
    public Set<String> scope() {
        // Immutability of the set is performed in the constructor/validation utils class, so
        // we don't need to repeat it here.
        return scopes;
    }
The token's scope of access, as per
<a href="https://tools.ietf.org/html/rfc6749#section-1.4">RFC 6749 Section
1.4</a>

@return the token's (always non-null but potentially empty) scope of access,
        as per <a href="https://tools.ietf.org/html/rfc6749#section-1.4">RFC
        6749 Section 1.4</a>. Note that all values in the returned set will
        be trimmed of preceding and trailing whitespace, and the result will
        never contain the empty string.
clients/src/main/java/org/apache/kafka/common/security/oauthbearer/internals/secured/BasicOAuthBearerToken.java