OAuth2:grantScan (response_type, client_id, redirect_uri, scope, state?)