Fewer scopes granted than requested
What it means
The token was issued but without some requested scopes; calls needing them will get 403.
Fix
Add the missing scopes to the client registration, or stop requesting them.
Check it with smart-doctor
Run your login and smart-doctor ranks this cause against the others, with the evidence it found.
npx smart-doctor check my-profile