# Authentication scope docs error

**URL:** <https://discuss.dev.twitch.com/t/authentication-scope-docs-error/9874>\
**Category:** API\
**Created:** [April 2, 2017, 4:59pm UTC](https://discuss.dev.twitch.com/t/authentication-scope-docs-error/9874 "2017-04-02T16:59:39Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![j3d247](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/j3d247/32/912_2.png) [@j3d247](https://discuss.dev.twitch.com/u/j3d247)\
**Post date:** [April 2, 2017, 4:59pm UTC](https://discuss.dev.twitch.com/t/authentication-scope-docs-error/9874/1 "2017-04-02T16:59:39Z")

</div>

I was just working on auth and noticed the docs for authentication scope has a contradiction in.

> **[Apps & Authentication](https://dev.twitch.tv/docs/authentication)**
>
> Apps & Authentication

The auth code flow shows `&scope=<space-separated list of scopes>`  
yet the example at the bottom of the page shows `&scope=user_read+channel_read``

Just thought I’d point it out so you’re aware

---

<div class="post-metadata">

**Author:** ![george](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/george/32/120_2.png) [@george](https://discuss.dev.twitch.com/u/george)\
**Post date:** [April 2, 2017, 5:08pm UTC](https://discuss.dev.twitch.com/t/authentication-scope-docs-error/9874/2 "2017-04-02T17:08:51Z")

</div>

Spaces will become either `+` or `%20` after you encode the query string values to generate the final authentication URL.

---

<div class="post-metadata">

**Author:** ![j3d247](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/j3d247/32/912_2.png) [@j3d247](https://discuss.dev.twitch.com/u/j3d247)\
**Post date:** [April 2, 2017, 8:50pm UTC](https://discuss.dev.twitch.com/t/authentication-scope-docs-error/9874/3 "2017-04-02T20:50:52Z")

</div>

I had assumed the same thing, and was using ‘+’ before. However discovered today that my scopes weren’t fully working. This fixed when I replaced all +'s with spaces.

Perhaps there’s a deeper bug here, then?

---

<div class="post-metadata">

**Author:** ![DallasNChains](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/dallasnchains/32/1608_2.png) [@DallasNChains](https://discuss.dev.twitch.com/u/DallasNChains)\
**Post date:** [April 3, 2017, 2:41pm UTC](https://discuss.dev.twitch.com/t/authentication-scope-docs-error/9874/4 "2017-04-03T14:41:59Z")

</div>

The + works for me if I add it into an anchor tag in HTML. I noticed that you have an extra `mark after channel_read. Is that a post error, or are you sending that request as the URL? There is an extra` mark in the auth code flow example, so that could be the confounding thing. 🙂

---

<div class="post-metadata">

**Author:** ![system](https://d2opxh93rbxzdn.cloudfront.net/original/2X/0/05909729875cce3b53e59d5561c4d23bb14948fc.png) [@system](https://discuss.dev.twitch.com/u/system)\
**Post date:** [May 3, 2017, 2:45pm UTC](https://discuss.dev.twitch.com/t/authentication-scope-docs-error/9874/5 "2017-05-03T14:45:27Z")

</div>

Closed on May 3, 2017, 2:45pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.