Validates that the request context contains a decoded access token that has the expected scope.