Get the Allowed scopes list from an API Product

[sanugu]

I have a requirement where I have to get the list of allowed scopes from the API Product and Generate a token with the scopes.

I am having trouble with the first part where I am unable to get the scopes from the API Product in the trace as flow variables while using access entity policy. Do I have to use management api call for this or can it be done using Javascript policy.

TIA.

@dchiesa1 @anilsr