To satisfy various use cases:

1. provide extraction of custom metadata from access token and id token.
2. support multi scope (permissions).