providers/oauth2: don't separate scopes by comma-space

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

authentik/providers/oauth2/views/authorize.py

@@ -457,7 +457,7 @@ class OAuthFulfillmentStage(StageView):
                 EventAction.AUTHORIZE_APPLICATION,
                 authorized_application=self.application,
                 flow=self.executor.plan.flow_pk,
-                scopes=", ".join(self.params.scope),
+                scopes=" ".join(self.params.scope),
             ).from_http(self.request)
             return self.redirect(self.create_response_uri())
         except (ClientIdError, RedirectUriError) as error: