Questions tagged [scopes]

An OAuth Scope is a permission setting that limits the permissiveness of a given OAuth Token. Clients therefore provide a list of desired Scopes when obtaining a Token (alongside standard OAuth ClientId and Client Authentication details). The Token will then be granted (or not) according to the Authentication process and the Scopes granted for the given Client Id

383 questions
1
vote
1 answer

Cannot update my own comment using YouTube Data API and Google Apps Script

I'm working with Google Apps Script and Google Sheets for update the comments I made on certain videos. While using the code I post bellow, I got this message: The comment could not be updated due to insufficient permissions. The request might not…
1
vote
2 answers

Struts2 and multiple active wizards / workflows

I'm currently working on a Struts2 application that integrates a wizard / workflow in order to produce the desired results. To make it more clear, there is a business object that is changed on three different pages (mostly with AJAX calls). At the…
Radu Cotescu
  • 534
  • 3
  • 10
1
vote
1 answer

Unable to add key to Azure key-vault backed Databricks scope

I am trying to create a keyvault backed scope in databricks. I am able to successfully create the scope but when I try to add a key to the scope I see the following error: Error: b'{"error_code":"BAD_REQUEST","message":"Cannot write secrets to Azure…
sotn
  • 1,833
  • 5
  • 35
  • 65
1
vote
1 answer

Customized Scope in Aws Cognito Token generation OIDC

We are using cognito for authentication and session management. We have added one external idp server which uses oauth as OIDC identity provider. For token generation, that IDP has different scopes, which gives access to various resources needed by…
1
vote
1 answer

How do I include custom scopes for a given Application in Azure AD's OpenID Connect Metadata discovery endpoint?

I have a REST API hosted in Azure App Services that defines custom scopes for restricting access to specific operations in the API to certain groups of users. When accessing the Azure's OpenID Connect Metadata discovery endpoint however, I can't…
julealgon
  • 7,072
  • 3
  • 32
  • 77
1
vote
1 answer

Shopify API Access scopes

I need a read_draft_orders and write_draft_orders permission after my app is approved by Shopify. right now when I training to install an app that time Shopify gives me an error like - Oauth error missing_shopify_permission: read_draft_orders,…
1
vote
1 answer

AAD client-credentials flow request scope for web api

I got a console app that needs to support two flows, authenticating against AAD to talk to a web api: for regular usage by humans, it needs to support interactive login for usage by a CI/CD pipeline it needs to support client-credentials. The…
Modern Ronin
  • 571
  • 1
  • 5
  • 13
1
vote
0 answers

Google fit Recording stesp and scopes

i am looking at this example https://developers.google.com/android/reference/com/google/android/gms/fitness/RecordingClient where they are using only scope with permission FitnessOptions.ACCESS_READ. I want to develop simple Step counter. What…
Klimoma
  • 11
  • 2
1
vote
1 answer

Firebase Facebook oAuth missing scopes in Facebook Popup Login

Facebook is ignoring our scope parameters that are being requested from our app. We're using Firebase authentication which provides an SDK that allows us to request a series of permission scopes from Facebook. Here is an example of what this looks…
1
vote
1 answer

Graph API "get groups" on behalf of signed user results into 403 error with message":"Insufficient privileges to complete the operation

use case: calling https://graph.microsoft.com/v1.0/groups by using Authorization_code flow on behalf of the logged in user: with OAuth2Session scope: https://graph.microsoft.com/.default oauth_session = OAuth2Session(clientid=clientid,…
guffi
  • 83
  • 4
1
vote
0 answers

SHOPIFY Uncaught (in promise) Error: GraphQL error: Access denied for orders field

I got this error to fetch orders with '@shopify/koa-shopify-auth'from a PUBLIC app. Uncaught (in promise) Error: GraphQL error: Access denied for orders field. The query is like this. orders(first: 10, after: $cursor, query: $query, reverse: true)…
1
vote
0 answers

What is the "right" term to use for describing the access control method used by OAuth 2.0?

I spent time googling and searching SO for an answer to this. I am looking into OAuth and access control while studying for a certification. The access token has the user-authorized scopes for the client app. Since the user has ownership of its…
bitsdanceforme
  • 131
  • 2
  • 6
1
vote
1 answer

How to add calendar scope to google cloud service account

I am using google api service to access google calender API. Here is my java sample GoogleCredential credentials = new GoogleCredential.Builder() .setTransport(GoogleNetHttpTransport.newTrustedTransport()) …
Pez
  • 1,091
  • 2
  • 14
  • 34
1
vote
2 answers

google.cloud.bigquery.Client() ignoring provided scopes, resulting in Permission denied while getting Drive credentials

I am trying to query data stored in Drive via the google.cloud.bigquery Python library. I've followed Google's guide for Querying Drive Data. Thus, my code looks like this: import google.auth from google.cloud import bigquery credentials, project =…
1
vote
1 answer

OAuth2 Session - How to add multiple scopes?

I am trying to add multiple scopes but it seems instead of adding spaces in the url, it adds +. I'm not sure how to ensure a space is added. I'm storing the scopes in a list. CALLBACK_URL = 'https://localhost/callback' CLIENT_SECRET =…