Regarding App Verification for Sensitive scope

[santhoshkesava]

Hi Team,

For Using Sensitive Scope in our Application Do we need to verify our app? We are doing R&D on Google BigQuery API Integration. while running an application we are getting an error "Request had insufficient authentication scopes." to procced further do we need our app to get verified ? Since its a testing app is there any other way we can procced without App verification. Thanks in advance.

[ErnestoC]

Since your application is being used for research and testing purposes, it’s not required to be verified, as stated in the OAuth verification FAQ. An unverified application would have a 100-user limit and a warning screen when users perform the authentication flow, among other limitations. 

If you are still seeing the “insufficient scopes” error message, could you add details of the API call you are running within your application? 

[santhoshkesava]

Dear ErnestoC,

As Suggested we tried the solution. But still we are getting the “insufficient scopes” Error. Please Find the API & Scopes Details Below.

API URL : https://bigquery.googleapis.com/bigquery/v2/projects/{projectId}/datasets/{datasetId}

SCOPES :
https://www.googleapis.com/auth/bigquery
https://www.googleapis.com/auth/cloud-platform
https://www.googleapis.com/auth/cloud-platform.read-only

Reference : https://cloud.google.com/bigquery/docs/reference/rest/v2/datasets/get

Error Message :
{
"error": {
"code": 403,
"message": "Request had insufficient authentication scopes.",
"errors": [
{
"message": "Insufficient Permission",
"domain": "global",
"reason": "insufficientPermissions"
}
],
"status": "PERMISSION_DENIED",
"details": [
{
"@type": "type.googleapis.com/google.rpc.ErrorInfo",
"reason": "ACCESS_TOKEN_SCOPE_INSUFFICIENT",
"metadata": {
"method": "google.cloud.bigquery.v2.DatasetService.GetDataset",
"service": "bigquery.googleapis.com"
}
}
]
}
}

[ErnestoC]

From the documentation, a 403 error code denotes access denied to the resource. How are you authenticating to the BigQuery API? If your application uses user accounts, you can check this page with the sample code to authenticate a user account. Adding the code could help in discovering if something is wrong there. Otherwise, are you authenticating with a service account instead?