fromScope

Reads roles from the space-delimited scope claim (OAuth 2.0), converting each scope token to a RouteRole via roleOf.

Absent or blank scopes yield an empty set. Scopes for which roleOf returns null are dropped.