"Scopes are specified as a space-separated list in the URL scope parameter, when requesting authorization:
Space- or Plus-separated?
A good call out. While + and %20 are usually considered interchangeable in the context of URL encoding for spaces, the team has confirmed we should document the use of %20 instead. This will be updated.
a plus is a URL encoded space