title: Identity Server 4 Identity related scope requests, but no openid scope
body: <p>I'm trying to add a custom resource/scope and for my testing I chose it to be email but as I understand it can be any value. So for my resources I have this:</p>
  
  <pre><code>return new List&lt;IdentityResource&gt;
  {
      new IdentityResources.OpenId(),
      new IdentityResources.Profile(),
      new IdentityResource("email", "Email", new [] { "email" })
      //new IdentityResources.Email()  -- This was tried as well, same error.
  };
  
  return new List&lt;ApiResource&gt; { new ApiResource("test", "Test") };
  </code></pre>
  
  <p>Then for scopes on the client its as follows:</p>
  
  <pre><code>AllowedScopes = new List&lt;string&gt;
  {
      "openid", "profile", "email", "test"
  }
  </code></pre>
  
  <p>However, when I request a token with <code>http://localhost:5000/connect/authorize?Scope=test email</code> the page errors out and in my lows I see</p>
  
  <blockquote>
    <p>2019-07-05 11:08:00.681 -04:00 [ERR] Invalid scope: email<br>
    2019-07-05 11:08:00.684 -04:00 [ERR] Request validation failed</p>
  </blockquote>
  
  <p>I'm really not sure where I went wrong. According to all docs and SO posts I found, this is how its done.</p>
  
  <p>EDIT: There was an internal bug which was overlooked and was causing wrong <code>List&lt;IdentityResource&gt;</code> to be passed. However, even after resolving this it still cause a problem with a different error message now:</p>
  
  <blockquote>
    <p>Identity related scope requests, but no openid scope</p>
  </blockquote>
  
  <p>Edit 2:</p>
  
  <p>After some help form d_f, I have realized that I needed to update my request which now looks like this:</p>
  
  <blockquote>
    <p>/connect/authorize?scope=test openid email&amp;response_type=id_token token&amp;nonce=NONCE</p>
  </blockquote>
  
  <p>I now get authorized and I can see the email scope in the claims. However, even though I see email as a scope, I don't see the actual email anywhere in the claims.</p>