pub fn verify_requested_scope_is_subset( requested: &Scopes, allowed: &Scopes, ) -> Result<(), OIDCError>