Request a new scope of the token for password leak check.

Bug: 986298
Change-Id: I05ccc92ea5ccdd70e10ae916cb826bb554ed3eff
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1762233
Commit-Queue: Vasilii Sukhanov <vasilii@chromium.org>
Commit-Queue: Jan Wilken Dörrie <jdoerrie@chromium.org>
Auto-Submit: Vasilii Sukhanov <vasilii@chromium.org>
Reviewed-by: Jan Wilken Dörrie <jdoerrie@chromium.org>
Cr-Commit-Position: refs/heads/master@{#688550}

components/password_manager/core/browser/leak_detection/authenticated_leak_check.cc

@@ -22,7 +22,8 @@ namespace {
 
 using ::signin::AccessTokenFetcher;
 
-constexpr char kAPIScope[] = "https://www.googleapis.com/auth/userinfo.id";
+constexpr char kAPIScope[] =
+    "https://www.googleapis.com/auth/identity.passwords.leak.check";
 
 // Returns a Google account that can be used for getting a token.
 CoreAccountId GetAccountForRequest(