Some do, some don't. That said, I haven't said a option to reject scopes on any of the big oauth providers