Check the url.
/unauthorized-scope-for-public-app-oauth2-token-grant-with-client-credentials.html