I'm finally able to send scopes, with the suggestion @W35K3R gave earlier. It's that I still get 401 everywhere. The xenforo's native oauth will also probably be better documented so I might have a better chance than navigating trough php code as a javascript developer.