Google Classroom Pub/Sub registration returning 403 authentication error

Question

I'm developing a php application using Google Classroom, and keep getting a "code": 403, "message": "Request had insufficient authentication scopes." error.

Here's what I've done so far, any help would be tremendous!

I've set up my app oauth permissions to use auth/classroom.push-notifications
I've set '[email protected]' to have the Pub/Sub Publisher role
I've set up a Pub/Sub topic

Here's the code I'm using:

$google_course_id = '123456';
$topic_name       = 'projects/my-app-name/topics/TopicName';
$feed_type        = 'COURSE_WORK_CHANGES';

$user = User::find(2); // User who has authorized via OAuth and accepted all permissions

$client = new Google_Client();
$client->setAccessToken($user->get_google_social_token());
$classroom = new Google_Service_Classroom($client);
$pub_sub = new Google_Service_Classroom_CloudPubsubTopic();
$pub_sub->setTopicName($topic_name);

$work_changes_info = new Google_Service_Classroom_CourseWorkChangesInfo();
$work_changes_info->setCourseId($google_course_id);

$feed = new Google_Service_Classroom_Feed();
$feed->setCourseWorkChangesInfo($work_changes_info);
$feed->setFeedType($feed_type);

$registration = new Google_Service_Classroom_Registration();
$registration->setCloudPubsubTopic($pub_sub);
$registration->setFeed($feed);

$classroom->registrations->create($registration);

Unfortunately, I keep getting the 403 error.

Any help in identifying what I'm missing would be greatly appreciated!

Could you be encountering one of the 'PERMISSION_DENIED' issues?developers.google.com/classroom/reference/rest/v1/registrations/… — Qiqi Wu
It could be, but in that case I don't think I'd be getting the "Insufficient authentication scopes" error. — ShawnyV

ShawnyV ShawnyV · Accepted Answer · 2019-06-12T19:04:46

I'm an idiot. While I remembered to add the push-notification scope to my google developer console, I forgot to add them to the Oauth linking code. Adding it to the bottom seems to have fixed the issue!

return Socialite::driver('google')
            ->scopes(['https://www.googleapis.com/auth/classroom.courses.readonly',
                'https://www.googleapis.com/auth/classroom.rosters.readonly',
                'https://www.googleapis.com/auth/classroom.coursework.students.readonly',
                'https://www.googleapis.com/auth/classroom.guardianlinks.students.readonly',
                'https://www.googleapis.com/auth/classroom.profile.emails',
                'https://www.googleapis.com/auth/drive.readonly',
                'https://www.googleapis.com/auth/classroom.push-notifications',
            ])
            ->with(['access_type' => 'offline', 'prompt' => 'consent select_account'])
            ->redirect();

Google Classroom Pub/Sub registration returning 403 authentication error

1 Answers