search

GAM-team / GAM

command line management for Google Workspace
https://github.com/GAM-team/GAM/wiki
Apache License 2.0
3.5k stars 470 forks source link

error 400: invalid_scope #1351

Closed lonix86 closed 3 years ago

lonix86 commented 3 years ago

dear Jay,

today it is not possible to authorize any GAM Project receiving the error attached, it seems to be a problem related to redirect_uri in the projects where we choose Desktop Application. image

jay0lee commented 3 years ago

How did you setup GAM? What os are you using? What steps did you take in gam before this (show screenshots).

No one else is reporting this issue which indicates something different on your end.

lonix86 commented 3 years ago

I have tried both GAM for MAC and for Windows on multiple Workspace domains, from today the wizard gives this error.

In practice, starting from the gam create project, everything continues as usual, the project is created, the APIs are enabled etc.

At the point where I launch the command gam user demouser@example.com check serviceaccount, or any other command, this presents me with the classic screen where I have to select "c" to continue the auth, here it is instead of having the classic screen I have the error of the screenshot.

I tried this on at least 6 different workspace domains

lvolkart commented 3 years ago

I have the same error that lonix86 mentioned. I have reinstalled GAM more than once and the problem persists, so I can't run any command because of this error. I am using Windows x64. I urgently need to solve this problem

lvolkart commented 3 years ago

Como você configurou o GAM? Qual sistema operacional você está usando? Quais etapas você executou no jogo antes disso (mostre as capturas de tela).

Ninguém mais está relatando esse problema, o que indica algo diferente do seu lado.

I have the same error that lonix86 mentioned. I have reinstalled GAM more than once and the problem persists, so I can't run any command because of this error. I am using Windows x64. I urgently need to solve this problem, I even sent you an email a few minutes ago reporting the problem.

taers232c commented 3 years ago

Try disabling the following scope (the number may be different) [*] 13) Directory API - Printers (supports readonly) Type the number so it looks like this: [ ] 13) Directory API - Printers (supports readonly) Type c to continue to authorization.

Ross

lvolkart commented 3 years ago

It didn't work, the same error occurred. 👎

taers232c commented 3 years ago

Do the same for: [*] 2) Chrome Policy API [*] 5) Cloud Identity - User Invitations (supports readonly)

Ross

lvolkart commented 3 years ago

It worked!!! THANK YOU SO MUCH

taers232c commented 3 years ago

The following would be very helpful to isolate which scope(s) is(are) causing the problem. Turn on one of the three scopes, try to authorize. If it works, good. If not, repeat with each of the other scopes. By turning them on one at a time we can figure out which of the three are causing the problem.

Thanks,

Ross

lonix86 commented 3 years ago

grr are just the scopes I wanted to use :(

lonix86 commented 3 years ago

@ivolkart I remind you that we are talking about an opensource product, so I would avoid the "I urgently need to solve this problem", we should only thank you for the work, which is completely free, to allow us small users to use these tool.

Jay & Ross ♥

Katun79 commented 3 years ago

Thank you so much! Disabling the "Cloud Identity - User Invitations (supports readonly)" I solved.

Thierry-Goodid commented 3 years ago

Thank you for this tips. I can setup Gam with "Cloud Identity - User Invitations (supports readonly)" unselected.

jay0lee commented 3 years ago

If you are looking at this issue please open a google support case and mention you are impacted by internal issue 184269639.

Opening the support case is a big help in getting these things resolved so if really appreciate it.

On Thu, Apr 1, 2021, 1:54 PM ThierryBerger @.***> wrote:

Thank you for this tips. I can setup Gam with "Cloud Identity - User Invitations (supports readonly)" unselected.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/jay0lee/GAM/issues/1351#issuecomment-812072049, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABDIZMGUCK23XPIXRVC5T7LTGSXL3ANCNFSM42GXTM7A .

taers232c commented 3 years ago

I don't seem to be able to open an issue, can you point me in the right direction?

Thanks,

Ross

jay0lee commented 3 years ago

Follow the steps at:

https://support.google.com/a/answer/1047213?hl=en

Jay

On Thu, Apr 1, 2021, 7:19 PM Ross Scroggs @.***> wrote:

I don't seem to be able to open an issue, can you point me in the right direction?

Thanks,

Ross

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/jay0lee/GAM/issues/1351#issuecomment-812227861, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABDIZMED2VMXY6NNK6BW4XLTGT5Q7ANCNFSM42GXTM7A .

taylorneville commented 3 years ago

I got this error as well on a clean install of Mac OS Catalina, but was able to authenticate by disabling

[*] 5) Cloud Identity - User Invitations (supports readonly)

piccio commented 3 years ago

Thank you so much! Disabling the "Cloud Identity - User Invitations (supports readonly)" I solved.

me too 👍

HippoCoartana commented 3 years ago

I can confirm that a fresh install of GAM 6.00 on a Windows 10 20H2 x64 system did not work until the "Cloud Identity - User Invitations (supports readonly)" scope was disabled. To be fair, I don't know if this API is generally enabled for my account, but I was looking for a quick fix.

64-bit MSI was downloaded today (4/5/2021), for a clean install (also today) of Windows 10 Enterprise.

Hope this helps!

markbazin commented 3 years ago

Same issue - thanks @jay0lee I have submitted a ticket with your internal issue reference number. In my case on windows, it was 4 (for anyone reading this thread later on and needing a quick answer what number to press):

[ ] 4) Cloud Identity - User Invitations (supports readonly)

CyrilJohnson commented 3 years ago

I'm on macOS BiSur and had the same issue here, but resolved by disabling these: [] 0) Chrome Browser Cloud Management (supports readonly) [ ] 1) Chrome Policy API [ ] 2) Classroom API - counts as 5 scopes [] 3) Cloud Identity - Groups (supports readonly) [ ] 4) Cloud Identity - User Invitations (supports readonly) [ ] 5) Contact Delegation (supports readonly) Maybe I overdid it a bit, but I guess I can try again after a while. Now I just had to solve a problem urgently. But thanks a lot for the tips, they really helped a lot, rather it made it difficult for me to return to the previous state in the cloud that I had messed :)

lwcorp commented 3 years ago

Unselecting this worked for me too: [ ] 4) Cloud Identity - User Invitations (supports readonly) Any idea why "Cloud Identity" causes such a problem?

jay0lee commented 3 years ago

This is fixed with GAM 6.01

lwcorp commented 3 years ago

I ran the new update, but how do I make the permission screen reappear so I can try adding the previous unselected option 4?

reenaraw commented 1 year ago

I am facing same issue after disabledGam Tool installation issue.docx

taers232c commented 1 year ago

Verify these steps: https://github.com/taers232c/GAMADV-XTD3/wiki/Authorization#introduction

Ross

On Tue, Mar 28, 2023 at 7:14 AM reenaraw @.***> wrote:

I am facing same issue after disabledGam Tool installation issue.docx https://github.com/GAM-team/GAM/files/11090458/Gam.Tool.installation.issue.docx

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1351#issuecomment-1486976555, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACCTYL5NVNKOF4JFDL5LHDLW6LW3LANCNFSM42GXTM7A . You are receiving this because you commented.Message ID: @.***>

-- Ross Scroggs @.***

reenaraw commented 1 year ago

We have verified the steps mentioned, but we are getting the same error. Is it possible for a support person to help us to install GAM tool?

jay0lee commented 1 year ago

This is not a bug. Please move the discussion to the group:

https://groups.google.com/g/google-apps-manager

taers232c commented 1 year ago

Send me a Meet/Zoom invitation.

Ross

ross.scroggs @ gmail.com

On Wed, Mar 29, 2023 at 3:10 AM reenaraw @.***> wrote:

We have verified the steps mentioned, but we are getting the same error. Is it possible for a support person to help us to install GAM tool?

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1351#issuecomment-1488316105, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACCTYL2IKJKNUAVVFLGRD23W6QDBPANCNFSM42GXTM7A . You are receiving this because you commented.Message ID: @.***>

-- Ross Scroggs @.***

reenaraw commented 1 year ago

Hello Ross,

Thanks for your confirmation, we are scheduling on tomorrow at 12:30 . [https://zoom.us/account/branding/p/a14392ed-7bbd-4c20-8d9d-53d88c027cc9.jpg]http://zoom.us/ Click HERE to Join the Zoom Meetinghttps://syngenta.zoom.com/j/96432071076 Next click on Join Audio with Computer If you don't have an internet connection - you may join by telephone instead. Use a dial in number that is closest to your current location: Click herehttps://syngenta.zoom.com/u/atBYsCu1 to find a list of phone numbers for all countries

US: +1 213 338 8477 or +1 253 215 8782 or +1 267 831 0333 or +1 301 715 8592 or +1 312 626 6799 or +1 346 248 7799 or +1 470 250 9358 or +1 470 381 2552 or +1 646 558 8656 or +1 669 900 6833 or +1 786 635 1003 or +1 971 247 1195 Switzerland: +41 31 528 09 88 or +41 43 210 70 42 or +41 43 210 71 08 United Kingdom: +44 131 460 1196 or +44 203 481 5237 or +44 203 481 5240 India: +91 22 48 798 004 or +91 22 71 279 525 or +91 80 71 279 440 If prompted enter this Meeting ID: 964 3207 1076 SIP: @.**@.> Meeting URL: https://syngenta.zoom.com/j/96432071076 Need help? Check Frequently Asked Questions herehttps://support.zoom.us/hc/en-us/articles/206175806-Top-Questions Click herehttps://support.zoom.us/hc/en-us/articles/201362003 to contact Zoom's support service

This message may contain confidential information. If you are not the designated recipient, please notify the sender immediately, and delete the original and any copies. Any use of the message by you is prohibited.

taers232c commented 1 year ago

I'm assuming that the meeting is at 12:30PM PDT; I have another call at 12:00 which should be over by then, but to be sure can you move our meeting to 1:00PM?

Thanks

reenaraw commented 1 year ago

Is it possible to join call now?

reenaraw commented 1 year ago

Please schedule a call according your availability.

reenaraw commented 1 year ago

Please schedule a call regarding your availability .

reenaraw commented 1 year ago

Hello Team,

My work time is 11:30 to 7:30 IST. can we connect according to this time schedule.

taers232c commented 1 year ago

Schedule a meeting between 6:30 PM IST and 7:30 PM IST.

On Fri, Mar 31, 2023 at 12:46 AM reenaraw @.***> wrote:

Hello Team,

My work time is 11:30 to 7:30 IST. can we connect according to this time schedule.

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1351#issuecomment-1491460308, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACCTYL2ZM3XGY53MXP3ZXH3W62DV5ANCNFSM42GXTM7A . You are receiving this because you commented.Message ID: @.***>

-- Ross Scroggs @.***

reenaraw commented 1 year ago

We have scheduled the meeting on tomorrow at 6:30 to 7:30 PM. Please join the meeting
https://syngenta.zoom.com/j/91734791921

taers232c commented 1 year ago

My apologies, I'm joining late.

Ross Scroggs @.***

On Mar 31, 2023, at 7:56 AM, reenaraw @.***> wrote:

We have scheduled the meeting on tomorrow at 6:30 to 7:30 PM. Please join the meeting https://syngenta.zoom.com/j/91734791921 https://syngenta.zoom.com/j/91734791921 — Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1351#issuecomment-1492062400, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACCTYLYSKMGCL2WKOBRZATTW63WDRANCNFSM42GXTM7A. You are receiving this because you commented.

reenaraw commented 1 year ago

Hello Ross,

We are rescheduling the meeting for today from 6:30 PM to 7:30 PM IST. Please join the meeting on time.

https://syngenta.zoom.com/j/98519870189

We are retry to tool GAM tool but this time , we are getting this

Go to the following link in your browser:

    https://gam-shortn.appspot.com/qajmb2

IMPORTANT: If you get a browser error that the site can't be reached AFTER you click the Allow button, copy the URL from the browser where the error occurred and paste that here instead.

Enter verification code or browser URL: 127.0.0.1 - - [03/Apr/2023 11:02:37] "GET /?state=AxbRETctRtaUSCcBthBbeQGJzIWCcC&code=4/0AVHEtk6qOSLxwaXk9QBR20WRe2NP1J_dgtOmpfeSvnMHIj8Dj6Q9TPZ5IyojQJYIYCxABA&scope=https://www.googleapis.com/auth/cloud-platform HTTP/1.1" 200 91

The authentication flow has completed. Creating project "GAM Project"... Checking project status...

ERROR: {'name': 'operations/cp.5950191580833636499', 'metadata': {'@type': 'type.googleapis.com/google.cloud.resourcemanager.v3.CreateProjectMetadata', 'createTime': '2023-04-03T05:29:17.308Z', 'ready': True}, 'done': True, 'error': {'code': 8, 'message': 'The project cannot be created because you have exceeded your allotted project quota.', 'details': [{'@type': 'type.googleapis.com/google.rpc.QuotaFailure', 'violations': [{'description': 'The project cannot be created because you have exceeded your allotted project quota.'}]}]}}

reenaraw commented 1 year ago

Hello Ross, Thank you! support and guidance, Can we set up a more call on this issue? We have some quires related to this at same time.

https://syngenta.zoom.us/j/94417887867

reenaraw commented 1 year ago

Hello Ross,

are you able to join the call? i am waiting

taers232c commented 1 year ago

I've joined if you are still at work.

On Tue, Apr 4, 2023 at 6:39 AM reenaraw @.***> wrote:

Hello Ross,

are you able to join the call? i am waiting

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1351#issuecomment-1495995170, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACCTYL4XLLPTBSZR2YSANN3W7QQCDANCNFSM42GXTM7A . You are receiving this because you commented.Message ID: @.***>

-- Ross Scroggs @.***

taers232c commented 1 year ago

We'll connect at 6:30PM IST.

Ross Scroggs @.***

On Apr 4, 2023, at 6:39 AM, reenaraw @.***> wrote:

Hello Ross,

are you able to join the call? i am waiting

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1351#issuecomment-1495995170, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACCTYL4XLLPTBSZR2YSANN3W7QQCDANCNFSM42GXTM7A. You are receiving this because you commented.

taers232c commented 1 year ago

I'm waiting for a Zoom invitation.

Ross

Ross Scroggs @.***

On Apr 4, 2023, at 6:39 AM, reenaraw @.***> wrote:

Hello Ross,

are you able to join the call? i am waiting

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1351#issuecomment-1495995170, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACCTYL4XLLPTBSZR2YSANN3W7QQCDANCNFSM42GXTM7A. You are receiving this because you commented.

reenaraw commented 1 year ago

Hello Ross,

We are waiting in call. please join.

taers232c commented 1 year ago

I get a message "The Meeting is scheduled for yesterday"

Ross Scroggs @.***

On Apr 5, 2023, at 6:07 AM, reenaraw @.***> wrote:

Hello Ross,

We are waiting in call. please join.

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1351#issuecomment-1497457648, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACCTYL57SUB4RQ33NXTNOTDW7VVBVANCNFSM42GXTM7A. You are receiving this because you commented.

reenaraw commented 1 year ago

Hello Ross,

we are waiting in call. please join.

https://syngenta.zoom.com/j/96920398387

reenaraw commented 1 year ago

Hello Ross,

Thank you! for your wonderful support We are facing some issue while configuring GAM tool . can we connect again to resolve the issue?

Thanks and Regards, Reena

Reena Rawat | Workplace Technology - SCCM Admin m. +91.9149253497 | @.**@.>

From: Ross Scroggs @.> Sent: Wednesday, April 5, 2023 6:39 PM To: GAM-team/GAM @.> Cc: Rawat Reena (ext) INPU @.>; Comment @.> Subject: Re: [GAM-team/GAM] error 400: invalid_scope (#1351)

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.

I get a message "The Meeting is scheduled for yesterday"

Ross Scroggs @.<mailto:@.>

On Apr 5, 2023, at 6:07 AM, reenaraw @.<mailto:@.>> wrote:

Hello Ross,

We are waiting in call. please join.

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1351#issuecomment-1497457648<https://github.com/GAM-team/GAM/issues/1351#issuecomment-1497457648>, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACCTYL57SUB4RQ33NXTNOTDW7VVBVANCNFSM42GXTM7A<https://github.com/notifications/unsubscribe-auth/ACCTYL57SUB4RQ33NXTNOTDW7VVBVANCNFSM42GXTM7A>. You are receiving this because you commented.

— Reply to this email directly, view it on GitHubhttps://github.com/GAM-team/GAM/issues/1351#issuecomment-1497459671, or unsubscribehttps://github.com/notifications/unsubscribe-auth/A6ZMF5ZPFQU2CN4GKEUIZ4DW7VVHPANCNFSM42GXTM7A. You are receiving this because you commented.Message ID: @.**@.>>

This message may contain confidential information. If you are not the designated recipient, please notify the sender immediately, and delete the original and any copies. Any use of the message by you is prohibited.

taers232c commented 1 year ago

Send me a Meet/Zoom invitation.

Ross

On Tue, Apr 25, 2023 at 5:28 AM reenaraw @.***> wrote:

Hello Ross,

Thank you! for your wonderful support We are facing some issue while configuring GAM tool . can we connect again to resolve the issue?

Thanks and Regards, Reena

Reena Rawat | Workplace Technology - SCCM Admin m. +91.9149253497 | @.**@.>

From: Ross Scroggs @.> Sent: Wednesday, April 5, 2023 6:39 PM To: GAM-team/GAM @.> Cc: Rawat Reena (ext) INPU @.>; Comment @.> Subject: Re: [GAM-team/GAM] error 400: invalid_scope (#1351)

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.

I get a message "The Meeting is scheduled for yesterday"

Ross Scroggs @.<mailto:@.>

On Apr 5, 2023, at 6:07 AM, reenaraw @.<mailto:@.>> wrote:

Hello Ross,

We are waiting in call. please join.

— Reply to this email directly, view it on GitHub < https://github.com/GAM-team/GAM/issues/1351#issuecomment-1497457648< https://github.com/GAM-team/GAM/issues/1351#issuecomment-1497457648>>, or unsubscribe < https://github.com/notifications/unsubscribe-auth/ACCTYL57SUB4RQ33NXTNOTDW7VVBVANCNFSM42GXTM7A < https://github.com/notifications/unsubscribe-auth/ACCTYL57SUB4RQ33NXTNOTDW7VVBVANCNFSM42GXTM7A>>.

You are receiving this because you commented.

— Reply to this email directly, view it on GitHub< https://github.com/GAM-team/GAM/issues/1351#issuecomment-1497459671>, or unsubscribe< https://github.com/notifications/unsubscribe-auth/A6ZMF5ZPFQU2CN4GKEUIZ4DW7VVHPANCNFSM42GXTM7A>.

You are receiving this because you commented.Message ID: @.**@.>>

This message may contain confidential information. If you are not the designated recipient, please notify the sender immediately, and delete the original and any copies. Any use of the message by you is prohibited.

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1351#issuecomment-1521705888, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACCTYL6OOXNJ44QV4JWJCH3XC67QRANCNFSM42GXTM7A . You are receiving this because you commented.Message ID: @.***>

-- Ross Scroggs @.***

reenaraw commented 1 year ago

Hello Ross,

we have scheduled a call at 6:30 PM IST. please join the call. https://syngenta.zoom.com/j/95377432689 Thanks and Regards Reena