The scopes granted for the refresh token. That means that access tokens received with this token will have these scopes. Null only for tokens received with 2.0.0-alpha library release. You're allowed to assert non-nullness the value if you're using a later version.