New to API : With https://---.qualtrics.com/API/v3/whoami 403 Error | XM Community
Skip to main content
Solved

New to API : With https://---.qualtrics.com/API/v3/whoami 403 Error

  • June 29, 2021
  • 4 replies
  • 554 views
D
Level 1 ●
Forum|alt.badge.img+1

Greetings
I am new to using the API.
I have created a user with scope manage:all
When using PostMan I am able to login and get bearer token but if I try the whoami call I get
    "meta": {
        "httpStatus": "403 - Forbidden",
        "error": {
            "errorMessage": "insufficient_scope",
            "errorCode": "AUTH_13.0"
        },
So the question is - what am I doing wrong

Best answer by deJagerF

Solved by deleting the raw text value

    4 replies

    D
    Level 1 ●
    Forum|alt.badge.img+1
    • deJagerF
    • Author
    • Level 1 ●
    • June 29, 2021

    image.pngI have even tried to update the token request to include the scope and grant_tupe but then I get

    Bad Request


    Your browser sent a request that this server could not understand.
    Reference #7.1d9f3617.1624966935.0

    D
    Level 1 ●
    Forum|alt.badge.img+1
    • deJagerF
    • Author
    • Level 1 ●
    • Answer
    • June 29, 2021

    Solved by deleting the raw text value

      A
      Level 1 ●
      Forum|alt.badge.img+3
      • alpa
      • Level 1 ●
      • June 30, 2021

      https://community.qualtrics.com/XMcommunity/discussion/comment/38713#Comment_38713How? I'm getting the exact same error.
      I'm able to passed oauth2 and obtain a bearer token. When I try the whoami endpoint, I got the exact same error:
      {"meta":{"httpStatus":"403 - Forbidden","error":{"errorMessage":"insufficient_scope","errorCode":"AUTH_13.0"},"requestId":"18f74174-bb77-4e94-a0d5-693b6da384f0"}}

      A
      Level 1 ●
      Forum|alt.badge.img+3
      • alpa
      • Level 1 ●
      • June 30, 2021

      https://community.qualtrics.com/XMcommunity/discussion/comment/38739#Comment_38739OK, solved my own problem.
      In addition to the 'grant_type' parameter in the oauth2 call, I have to add 'scope' = manage:all in it

      Terms & ConditionsAccessibility statement