🐛 explicitly set scopes for new mastodon instances

[MrKrisKrisu]

fixes #2666

[HerrLevin]

Code wise this looks good to me.

But have you tested this locally? I mean, did you create an app first and then log in again after making your changes—or try it with a different one?

If not, please try it with multiple instances. Mastodon, Pleroma, GoToSocial, MissKey, etc.
OAuth2 can be tricky to implement. Sometimes changing a scope can break things.

[MrKrisKrisu]

If not, please try it with multiple instances. Mastodon, Pleroma, GoToSocial, MissKey

I can test that further. But since when have we supported anything other than Mastodon? We’ve never claimed to support anything else.

[HerrLevin]

But since when have we supported anything other than Mastodon? We’ve never claimed to support anything else.

I know that, but we still have a huge userbase with very specific activitypub configurations (and many without an email address). I'd rather not see them locked out of their account + us having to fix it manually. :D