title: Requesting multiple scopes in Spring Security Oauth2 version 2.0.7.RELEASE
body: <p>We have an application which is using <code>spring-security-oauth2:1.0</code>. I was trying to change it to a newer version, <code>spring-security-oauth2:2.0.7.RELEASE</code>. If I don't specify the <code>scope</code> or If I specify I single scope, the application works fine. I have a problem while requesting multiple scopes like <code>read,write</code>, which used to work in previous version.</p>
  
  <p>The client I am requesting has all <code>read,write and trust</code> permissions.</p>
  
  <p>When I was using <code>spring-security-oauth2:1.0</code>, to get a token I used to do a get call like</p>
  
  <blockquote>
    <p><a href="http://localhost:8080/oauth/token?grant_type=password&amp;client_id=ws&amp;client_secret=secret&amp;scope=read,write&amp;username=user@abc.com&amp;password=temp123" rel="noreferrer">http://localhost:8080/oauth/token?grant_type=password&amp;client_id=ws&amp;client_secret=secret&amp;scope=read,write&amp;username=user@abc.com&amp;password=temp123</a></p>
  </blockquote>
  
  <p>If you see the scope parameter <code>scope=read,write</code>, by requesting this way I used to get a token with scope <code>read and write</code>.</p>
  
  <p>If I try to do the same thing with Oauth2 version <code>2.0.7.RELEASE</code>(with a <code>POST</code> request though), I get <code>Invalid Scope</code> exception because the <code>tokenRequest</code>is taking <code>read,write</code> as a single scope. The client I am requesting has <code>read,write and trust</code> permissions but <code>read,write</code> is not one of them.</p>
  
  <p>If I try it with <code>scope=write</code> or <code>scope=read</code>, It works fine because <code>read</code> or <code>write</code> are part of the client's scope.</p>
  
  <p>If I want to request for multiple scopes in <code>OAuth2 2.0.7.RELEASE</code>, how do I do that?</p>