ApiResource vs ApiScope vs IdentityResource
Solution 1:
Scopes listed under IdentityResources are the scopes that will be included in the ID-token.
ApiScopes is what you ask for as a client and as a user you give consent to. Optionally, one or more ApiResources can associated with an ApiScope.
The ApiScope and ApiResources controls what is included in the access token. ApiResources points out what the aud claim in the access token will contains.
To summarize, the scopes sent by the client is a list of IdentityResources and ApiScopes.
