Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

error 400: invalid_scope #1351

Closed
lonix86 opened this issue Apr 1, 2021 · 60 comments
Closed

error 400: invalid_scope #1351

lonix86 opened this issue Apr 1, 2021 · 60 comments

Comments

@lonix86
Copy link

lonix86 commented Apr 1, 2021 •
edited

dear Jay,

today it is not possible to authorize any GAM Project receiving the error attached, it seems to be a problem related to redirect_uri in the projects where we choose Desktop Application.
image
@jay0lee
Copy link
Member

jay0lee commented Apr 1, 2021

How did you setup GAM? What os are you using? What steps did you take in gam before this (show screenshots).

No one else is reporting this issue which indicates something different on your end.

@lonix86
Copy link
Author

lonix86 commented Apr 1, 2021

I have tried both GAM for MAC and for Windows on multiple Workspace domains, from today the wizard gives this error.

In practice, starting from the gam create project, everything continues as usual, the project is created, the APIs are enabled etc.

At the point where I launch the command gam user demouser@example.com check serviceaccount, or any other command, this presents me with the classic screen where I have to select "c" to continue the auth, here it is instead of having the classic screen I have the error of the screenshot.

I tried this on at least 6 different workspace domains

@lvolkart
Copy link

lvolkart commented Apr 1, 2021 •
edited

I have the same error that lonix86 mentioned. I have reinstalled GAM more than once and the problem persists, so I can't run any command because of this error.
I am using Windows x64. I urgently need to solve this problem

@lvolkart
Copy link

lvolkart commented Apr 1, 2021

Como você configurou o GAM? Qual sistema operacional você está usando? Quais etapas você executou no jogo antes disso (mostre as capturas de tela).

Ninguém mais está relatando esse problema, o que indica algo diferente do seu lado.

I have the same error that lonix86 mentioned. I have reinstalled GAM more than once and the problem persists, so I can't run any command because of this error.
I am using Windows x64. I urgently need to solve this problem, I even sent you an email a few minutes ago reporting the problem.

@taers232c
Copy link
Contributor

Try disabling the following scope (the number may be different)
[*] 13) Directory API - Printers (supports readonly)
Type the number so it looks like this:
[ ] 13) Directory API - Printers (supports readonly)
Type c to continue to authorization.

Ross

@lvolkart
Copy link

lvolkart commented Apr 1, 2021

It didn't work, the same error occurred.
👎

@taers232c
Copy link
Contributor

Do the same for:
[*] 2) Chrome Policy API
[*] 5) Cloud Identity - User Invitations (supports readonly)

Ross

@lvolkart
Copy link

lvolkart commented Apr 1, 2021

It worked!!! THANK YOU SO MUCH

@taers232c
Copy link
Contributor

The following would be very helpful to isolate which scope(s) is(are) causing the problem.
Turn on one of the three scopes, try to authorize. If it works, good. If not, repeat with each of the other scopes.
By turning them on one at a time we can figure out which of the three are causing the problem.

Thanks,

Ross

@lonix86
Copy link
Author

lonix86 commented Apr 1, 2021

grr are just the scopes I wanted to use :(

@lonix86
Copy link
Author

lonix86 commented Apr 1, 2021

@ivolkart I remind you that we are talking about an opensource product, so I would avoid the "I urgently need to solve this problem", we should only thank you for the work, which is completely free, to allow us small users to use these tool.

Jay & Ross ♥

@Katun79
Copy link

Katun79 commented Apr 1, 2021

Thank you so much!
Disabling the "Cloud Identity - User Invitations (supports readonly)" I solved.

@Thierry-Goodid
Copy link

Thank you for this tips. I can setup Gam with "Cloud Identity - User Invitations (supports readonly)" unselected.

@jay0lee
Copy link
Member

jay0lee commented Apr 1, 2021 via email

@taers232c
Copy link
Contributor

I don't seem to be able to open an issue, can you point me in the right direction?

Thanks,

Ross

@jay0lee
Copy link
Member

jay0lee commented Apr 1, 2021 via email

@taylorneville
Copy link

I got this error as well on a clean install of Mac OS Catalina, but was able to authenticate by disabling

[*] 5) Cloud Identity - User Invitations (supports readonly)

@piccio
Copy link

piccio commented Apr 2, 2021

Thank you so much!
Disabling the "Cloud Identity - User Invitations (supports readonly)" I solved.

me too 👍

@HippoCoartana
Copy link

I can confirm that a fresh install of GAM 6.00 on a Windows 10 20H2 x64 system did not work until the "Cloud Identity - User Invitations (supports readonly)" scope was disabled. To be fair, I don't know if this API is generally enabled for my account, but I was looking for a quick fix.

64-bit MSI was downloaded today (4/5/2021), for a clean install (also today) of Windows 10 Enterprise.

Hope this helps!

@markbazin
Copy link

markbazin commented Apr 7, 2021 •
edited

Same issue - thanks @jay0lee I have submitted a ticket with your internal issue reference number. In my case on windows, it was 4 (for anyone reading this thread later on and needing a quick answer what number to press):

[ ] 4) Cloud Identity - User Invitations (supports readonly)

@CyrilJohnson
Copy link

I'm on macOS BiSur and had the same issue here, but resolved by disabling these:
[] 0) Chrome Browser Cloud Management (supports readonly)
[ ] 1) Chrome Policy API
[ ] 2) Classroom API - counts as 5 scopes
[] 3) Cloud Identity - Groups (supports readonly)
[ ] 4) Cloud Identity - User Invitations (supports readonly)
[ ] 5) Contact Delegation (supports readonly)
Maybe I overdid it a bit, but I guess I can try again after a while. Now I just had to solve a problem urgently. But thanks a lot for the tips, they really helped a lot, rather it made it difficult for me to return to the previous state in the cloud that I had messed :)

@kyomi44 kyomi44 mentioned this issue Apr 8, 2021
Closed
@lwcorp
Copy link

lwcorp commented Apr 9, 2021 •
edited

Unselecting this worked for me too:
[ ] 4) Cloud Identity - User Invitations (supports readonly)
Any idea why "Cloud Identity" causes such a problem?

@jay0lee
Copy link
Member

jay0lee commented Apr 9, 2021

This is fixed with GAM 6.01

@jay0lee jay0lee closed this as completed Apr 9, 2021
@lwcorp
Copy link

lwcorp commented Apr 9, 2021

I ran the new update, but how do I make the permission screen reappear so I can try adding the previous unselected option 4?

@reenaraw
Copy link

I am facing same issue after disabledGam Tool installation issue.docx

@taers232c
Copy link
Contributor

taers232c commented Mar 28, 2023 via email

@reenaraw
Copy link

We have verified the steps mentioned, but we are getting the same error. Is it possible for a support person to help us to install GAM tool?

@jay0lee
Copy link
Member

jay0lee commented Mar 29, 2023

This is not a bug. Please move the discussion to the group:

https://groups.google.com/g/google-apps-manager

@taers232c
Copy link
Contributor

I'm assuming that the meeting is at 12:30PM PDT; I have another call at 12:00 which should be over by then, but to be sure can you move our meeting to 1:00PM?

Thanks

@reenaraw
Copy link

Is it possible to join call now?

@reenaraw
Copy link

Please schedule a call according your availability.

@reenaraw
Copy link

Please schedule a call regarding your availability .

@reenaraw
Copy link

Hello Team,

My work time is 11:30 to 7:30 IST. can we connect according to this time schedule.

@taers232c
Copy link
Contributor

taers232c commented Mar 31, 2023 via email

@reenaraw
Copy link

We have scheduled the meeting on tomorrow at 6:30 to 7:30 PM. Please join the meeting
https://syngenta.zoom.com/j/91734791921

@taers232c
Copy link
Contributor

taers232c commented Apr 1, 2023 via email

@reenaraw
Copy link

reenaraw commented Apr 3, 2023

Hello Ross,

We are rescheduling the meeting for today from 6:30 PM to 7:30 PM IST. Please join the meeting on time.

https://syngenta.zoom.com/j/98519870189

We are retry to tool GAM tool but this time , we are getting this

Go to the following link in your browser:

    https://gam-shortn.appspot.com/qajmb2

IMPORTANT: If you get a browser error that the site can't be reached AFTER you
click the Allow button, copy the URL from the browser where the error occurred
and paste that here instead.

Enter verification code or browser URL: 127.0.0.1 - - [03/Apr/2023 11:02:37] "GET /?state=AxbRETctRtaUSCcBthBbeQGJzIWCcC&code=4/0AVHEtk6qOSLxwaXk9QBR20WRe2NP1J_dgtOmpfeSvnMHIj8Dj6Q9TPZ5IyojQJYIYCxABA&scope=https://www.googleapis.com/auth/cloud-platform HTTP/1.1" 200 91

The authentication flow has completed.
Creating project "GAM Project"...
Checking project status...

ERROR: {'name': 'operations/cp.5950191580833636499', 'metadata': {'@type': 'type.googleapis.com/google.cloud.resourcemanager.v3.CreateProjectMetadata', 'createTime': '2023-04-03T05:29:17.308Z', 'ready': True}, 'done': True, 'error': {'code': 8, 'message': 'The project cannot be created because you have exceeded your allotted project quota.', 'details': [{'@type': 'type.googleapis.com/google.rpc.QuotaFailure', 'violations': [{'description': 'The project cannot be created because you have exceeded your allotted project quota.'}]}]}}

@reenaraw
Copy link

reenaraw commented Apr 4, 2023

Hello Ross,
Thank you! support and guidance,
Can we set up a more call on this issue? We have some quires related to this at same time.

https://syngenta.zoom.us/j/94417887867

@reenaraw
Copy link

reenaraw commented Apr 4, 2023

Hello Ross,

are you able to join the call? i am waiting

@taers232c
Copy link
Contributor

taers232c commented Apr 4, 2023 via email

@taers232c
Copy link
Contributor

taers232c commented Apr 5, 2023 via email

@taers232c
Copy link
Contributor

taers232c commented Apr 5, 2023 via email

@reenaraw
Copy link

reenaraw commented Apr 5, 2023

Hello Ross,

We are waiting in call. please join.

@taers232c
Copy link
Contributor

taers232c commented Apr 5, 2023 via email

@reenaraw
Copy link

reenaraw commented Apr 5, 2023

Hello Ross,

we are waiting in call. please join.

https://syngenta.zoom.com/j/96920398387

@reenaraw
Copy link

reenaraw commented Apr 25, 2023 via email

@taers232c
Copy link
Contributor

taers232c commented Apr 25, 2023 via email

@reenaraw
Copy link

reenaraw commented Apr 26, 2023 •
edited

Hello Ross,

we have scheduled a call at 6:30 PM IST. please join the call.
https://syngenta.zoom.com/j/95377432689
Thanks and Regards
Reena

@reenaraw
Copy link

Hello Ross,

are you able to join the call?

@taers232c
Copy link
Contributor

taers232c commented Apr 26, 2023 via email

@reenaraw
Copy link

reenaraw commented Apr 27, 2023 via email

@reenaraw
Copy link

Hello Ross,

we have scheduled a meeting on 8:00PM IST. please join the meeting
https://syngenta.zoom.com/j/93722814247

Thanks and Regards
Reena

@taers232c
Copy link
Contributor

taers232c commented Apr 27, 2023 via email

@taers232c
Copy link
Contributor

taers232c commented Apr 27, 2023 via email

@reenaraw
Copy link

reenaraw commented Apr 27, 2023 via email

@reenaraw
Copy link

Hello Ross,

Thank you! for support to Install GAM tool.
could you please provide those steps which we followed to install GAM. That would be great help for us.

Thanks and Regard
Reena

@taers232c
Copy link
Contributor

taers232c commented Apr 28, 2023 via email

@reenaraw
Copy link

reenaraw commented Jan 5, 2024 via email

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests