allow scopes extraction on GET requests for auth_code and implicit grants

src/Grant/AuthCodeGrant.php

@@ -94,7 +94,11 @@ class AuthCodeGrant extends AbstractAuthorizeGrant
             throw OAuthServerException::invalidClient();
         }
 
-        $scopes = $this->validateScopes($request, $client, $client->getRedirectUri());
+        $scopes = $this->validateScopes(
+            $this->getQueryStringParameter('scope', $request),
+            $client,
+            $client->getRedirectUri()
+        );
         $queryString = http_build_query($request->getQueryParams());
         $postbackUri = new Uri(
             sprintf(