Insufficient scope

What it means

The credential is valid but lacks a scope this operation requires; WWW-Authenticate names every missing scope.

What to do

Read the scope in WWW-Authenticate: it names every scope the operation needs. Mint a key with them, or authorize the app again asking for them.

Example

Sent as application/problem+json with status 403. detail varies with the request; branch on type.

{
  "type": "https://impartire.com/problems/insufficient-scope",
  "title": "Insufficient scope",
  "status": 403,
  "detail": "This operation needs assets:write; the key has assets:read.",
  "instance": "/api/v1/assets",
  "request_id": "01JB8Z5W6Q4N3X2V1T0S9R8P7M"
}