invalid_scope error when attempting to get OAuth token

benjaminsmith · July 4, 2013, 4:56pm

I’m following the steps in https://docs.google.com/document/d/14F5CnjIbI8Ru4-MrjHXhnBGGQngUevVEe7H3cqoGHKA/edit?pli=1#

I am able to get a code from /oauth/authorize, but when I try to use it to fetch an access token from /oauth/token I get the following JSON:

{
“error”: “invalid_scope”,
“error_description”: “Invalid scope (none)”
}

I am using the client id and client secret found on the App Settings page of the app I’ve installed.

What am I doing wrong?

sghoweri · July 5, 2013, 7:06am

@Benjamin - Same issue here at the exact same step in setting up OAuth. I almost gave up when I came across a simliar setup in the SmartThings Alfred Web Service.

github.com

PhysicalGraph/SmartThings-Alfred/blob/master/alfredworkflow/http_server.py

import httplib
import urllib
import urlparse
import BaseHTTPServer, SimpleHTTPServer
import json
from settings import SERVER_PORT, PROTOCOL, HOSTNAME, PORT, CLIENT_ID, CLIENT_SECRET


class StoppableHttpServer(BaseHTTPServer.HTTPServer):
    def serve_forever(self):
        self.stop = False
        while not self.stop:
            self.handle_request()


class StoppableHttpRequestHandler(SimpleHTTPServer.SimpleHTTPRequestHandler):
    def do_GET(self):
        print "Processing %s" % self.path
        if "/success" in self.path:
            print "Stopping embedded HTTP server"

This file has been truncated. show original

github.com

PhysicalGraph/SmartThings-Alfred/blob/master/alfredworkflow/info.plist

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>bundleid</key>
	<string>com.smartthings.alfred</string>
	<key>connections</key>
	<dict>
		<key>185FBDF4-6EB5-43BB-BE69-A06013624351</key>
		<array>
			<dict>
				<key>destinationuid</key>
				<string>11C42622-3B43-409F-98B3-AD66FD0BCF4B</string>
				<key>modifiers</key>
				<integer>0</integer>
				<key>modifiersubtext</key>
				<string></string>
			</dict>
			<dict>
				<key>destinationuid</key>

This file has been truncated. show original

It looks like the Authorize and Token requests are passing along a scope=app parameter which appears to have done the trick when I tried it on my end.

When you are requesting the Access Grant from /oauth/authorize, try including a parameter of scope=app and then include this scope=app parameter again when fetching the access token from /oauth/token.

Hope this helps!
Salem

benjaminsmith · July 6, 2013, 10:23am

Salem,

That totally works! Thanks! Any idea what the scope=app actually means and if there are other scopes you can request?

invalid_scope error when attempting to get OAuth token

Customers

Developers

Download the SmartThings App