fn resolve_refresh_scopes(
original: &[String],
requested: Option<&str>,
) -> Result<Vec<String>, TokenGrantError>Expand description
Resolves a refresh grant’s requested scope against the token’s original scope,
per RFC 6749 §6: absent scope, the original set carries over unchanged; a
space-delimited subset narrows it; anything outside the original set is rejected.