Hi @chxry,
The React SDK will always send the default scopes along with any scopes you pass in the scope parameter passed to the Auth0Provider. You can alter the default scopes by passing advancedOptions: { defaultScope: 'openid email' } to the Auth0Provider: https://auth0.github.io/auth0-react/interfaces/auth0_provider.auth0provideroptions.html#advancedoptions
At least openid and email will be required for authentication in most cases though.