Blazor WASM double/added access token scope scheme

[guardrex]

Update the guidance in this topic and the AAD B2C WASM security topic for a double scheme or a scheme prefixed with api:// based on the outcome of https://github.com/dotnet/aspnetcore/issues/27417.

Cross-ref to docs PR: https://github.com/dotnet/AspNetCore.Docs/pull/20385

In the API: https://github.com/dotnet/Scaffolding/blob/main/src/MSIdentityScaffolding/Microsoft.DotNet.MSIdentity/Tool/AppProvisioningTool.cs#L294

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 3039ff79-ee86-20b1-0082-d3899a84c823
• Version Independent ID: af4a3a75-ae52-5f6d-2120-737bc2fefb07
• Content: Secure an ASP.NET Core Blazor WebAssembly hosted app with Azure Active Directory
• Content Source: aspnetcore/blazor/security/webassembly/hosted-with-azure-active-directory.md
• Product: aspnet-core
• Technology: aspnetcore-blazor
• GitHub Login: @guardrex
• Microsoft Alias: riande