title: OpenIddict: options.DisableScopeValidation() not disabling scope validation
body: <p>Really sorry if this is a stupid question, but somehow I can't get options.DisableScopeValidation() working.</p>
  <p>My code</p>
  <pre><code>
  // OpenIddict
  builder.Services.AddOpenIddict()
      .AddCore(options =&gt;
      {
          options.UseEntityFrameworkCore().UseDbContext&lt;ApplicationDbContext&gt;();
      })
      .AddServer(options =&gt;
      {
          // Flow
          options
          .AllowAuthorizationCodeFlow().RequireProofKeyForCodeExchange()
          .AllowClientCredentialsFlow()
          .AllowRefreshTokenFlow();
  
          options.SetAuthorizationEndpointUris(&quot;/connect/authorize&quot;); // Ni flow yang user login kt VentureAuth.
          options.SetTokenEndpointUris(&quot;/connect/token&quot;); // Token Endpoint: Clients nak mintak token, mintak kat sini.
          options.SetUserinfoEndpointUris(&quot;/connect/userinfo&quot;);
  
          // Can disable access token encryption if want to read access token
          // https://dev.to/robinvanderknaap/setting-up-an-authorization-server-with-openiddict-part-iii-client-credentials-flow-55lp
          options
              .AddEphemeralEncryptionKey()
              .AddEphemeralSigningKey()
              .DisableAccessTokenEncryption();
  
          //options.RegisterScopes(&quot;api&quot;);
  
          options
              .UseAspNetCore()
              .EnableTokenEndpointPassthrough()
              .EnableAuthorizationEndpointPassthrough()
              .EnableUserinfoEndpointPassthrough();
  
          options.DisableScopeValidation();
  
      });
  </code></pre>
  <p>I can retrieve a token when I don't send any scope. However, whenever I send any other undefined scopes, I get the message:</p>
  <pre><code>error:invalid_request
  error_description:This client application is not allowed to use the specified scope.
  error_uri:https://documentation.openiddict.com/errors/ID2051
  </code></pre>
  <p>This is a screenshot of the request I've made:
  <a href="https://i.stack.imgur.com/aNSa7.png" rel="nofollow noreferrer">Screenshot of POSTMAN request</a></p>
  <p>Thank you.</p>