def METHOD_NAME(self):
    self.prepare_data()
    self.server.scopes_supported = ['profile']
    headers = self.create_basic_header(
        'password-client', 'password-secret'
    )
    rv = self.client.post('/oauth/token', data={
        'grant_type': 'password',
        'username': 'foo',
        'password': 'ok',
        'scope': 'invalid',
    }, headers=headers)
    resp = json.loads(rv.data)
    self.assertEqual(resp['error'], 'invalid_scope')