feat: adjust oauth2 implementation for TYPO3 backend login

src/Controller/Api/UserinfoController.php

@@ -29,9 +29,15 @@ class UserinfoController extends AbstractController
         $scopes = ['email'];
 
         // extend scopes depending on granted permissions
+        if ($this->isGranted('ROLE_OAUTH2_ID')) {
+            $scopes[] = 'id';
+        }
         if ($this->isGranted('ROLE_OAUTH2_PROFILE')) {
             $scopes[] = 'profile';
         }
+        if ($this->isGranted('ROLE_OAUTH2_ROLES')) {
+            $scopes[] = 'roles';
+        }
 
         /** @var User $user */
         $user = $this->getUser();
@@ -45,6 +51,9 @@ class UserinfoController extends AbstractController
                 return new JsonResponse(['message' => $data->message, 'code' => $data->code], Response::HTTP_BAD_REQUEST);
             }
 
+            // Patch current user's roles
+            $data->roles = $user->getRoles();
+
             // extract userdata for resulting claims
             $userData = $this->getClaims($data, $scopes);