LocalAccessDecisionManager判断当前OAuth2Authentication的scope是否为“read”

怎么获取scope？

public void decide(Authentication authentication, Object object,
      Collection<ConfigAttribute> configAttributes)
      throws AccessDeniedException, InsufficientAuthenticationException {

}

这个是方法，能从authentication 里面下手获取吗？