show only endpoint relevant oauth scopes in authorization window

[kai-morich]

Is your feature request related to a problem?

With the upper lock symbol, all possible authorizations are shown. Thats ok.
With the lower lock symbol, the authorizations are already filtered to the types supported by an endpoint, but for oauth, still all scopes are shown

Describe the solution you'd like

Should be reduced to the scopes specified at the endpoint (for below example should be admin only for the POST endpoint)

Additional context

minimalistic example:

openapi: 3.0.3
info:
 title: scope test
 version: 0.1.0
servers:
 - url: http://testserver.com
paths:
 /pet/:
   get:
     responses:
       '200':
         description: Successful Response
     security:
       - BasicAuth: []
       - OAuth2: [read] 
   post:
     responses:
       '200':
         description: Successful Response
     security:
       - OAuth2: [admin]
components:
 securitySchemes:
   BasicAuth:
     type: http
     scheme: basic
   OAuth2:
     type: oauth2
     flows:
       clientCredentials:
         tokenUrl: https://api.testserver.com/oauth2/token/
         scopes:
           admin: modify pets in your account
           read: read your pets

[kai-morich]

There is a getDefinitionsByNames function that looks like it does filtering on oauth scopes.

swagger-ui/src/core/plugins/auth/selectors.js

Line 30 in 775d307

export const getDefinitionsByNames = ( state, securities ) => ( { specSelectors } ) => {

It was disabled with #3870, but that PR does not mention a concrete issue.
@shockey, @webron do you remember why?