# Authorization scopes problem **URL:** \ **Category:** API\ **Created:** [May 5, 2025, 12:25pm UTC](https://discuss.dev.twitch.com/t/authorization-scopes-problem/63499 "2025-05-05T12:25:23Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![leonardo.rivaldo](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/leonardo.rivaldo/32/30706_2.png) [@leonardo.rivaldo](https://discuss.dev.twitch.com/u/leonardo.rivaldo)\ **Post date:** [May 5, 2025, 12:25pm UTC](https://discuss.dev.twitch.com/t/authorization-scopes-problem/63499/1 "2025-05-05T12:25:23Z")
i’ve being using tokengenarator for my bot for sometime now, but i wanted to read channel:points redemptions, when i subscribe to that on the evensub api it does not work, 403 not autorized or missing credentials, but if i create my own toke it does, but here is the kicker, if u do my own token the chat sub does not work any ideas ? ps.: this is url i’m using to start the flow `https://id.twitch.tv/oauth2/authorize?response_type=code&client_id=ID&redirect_uri=https%3A%2F%2F127.0.0.1%3A8083&scope=analytics:read:extensions+analytics:read:games+bits:read+channel:bot+channel:edit:commercial+channel:manage:ads+channel:manage:broadcast+channel:manage:extensions+channel:manage:guest_star+channel:manage:moderators+channel:manage:polls+channel:manage:predictions+channel:manage:raids+channel:manage:redemptions+channel:manage:schedule+channel:manage:videos+channel:manage:vips+channel:moderate+channel:read:ads+channel:read:charity+channel:read:editors+channel:read:goals+channel:read:guest_star+channel:read:hype_train+channel:read:polls+channel:read:predictions+channel:read:redemptions+channel:read:stream_key+channel:read:subscriptions+channel:read:vips+chat:edit+chat:read+clips:edit+moderation:read+moderator:manage:announcements+moderator:manage:automod+moderator:manage:automod_settings+moderator:manage:banned_users+moderator:manage:blocked_terms+moderator:manage:chat_messages+moderator:manage:chat_settings+moderator:manage:guest_star+moderator:manage:shield_mode+moderator:manage:shoutouts+moderator:manage:unban_requests+moderator:manage:warnings+moderator:read:automod_settings+moderator:read:blocked_terms+moderator:read:chat_settings+moderator:read:chatters+moderator:read:followers+moderator:read:guest_star+moderator:read:shield_mode+moderator:read:shoutouts+moderator:read:suspicious_users+moderator:read:unban_requests+user:bot+user:edit+user:edit:broadcast+user:edit:follows+user:manage:blocked_users+user:manage:chat_color+user:manage:whispers+user:read:blocked_users+user:read:broadcast+user:read:chat+user:read:email+user:read:emotes+user:read:follows+user:read:moderated_channels+user:read:subscriptions+user:write:chat+whispers:edit+whispers:read` ---
**Author:** ![BarryCarlyon](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/barrycarlyon/32/253_2.png) [@BarryCarlyon](https://discuss.dev.twitch.com/u/BarryCarlyon)\ **Post date:** [May 5, 2025, 4:24pm UTC](https://discuss.dev.twitch.com/t/authorization-scopes-problem/63499/2 "2025-05-05T16:24:27Z")
> [@leonardo.rivaldo](#): > > when i subscribe to that on the evensub api it does not work, 403 not autorized or missing credentials webhooks/conduits or websockets > [@leonardo.rivaldo](#): > > i’ve being using tokengenarator for my bot Generally speaking those are for testing and shouldn’t be used in production use cases. > [@leonardo.rivaldo](#): > > 403 not autorized or missing credentials, but if i create my own toke it does, but here is the kicker, if u do my own token the chat sub does not work Not sure what “chat sub” is here, not sure if you mean IRC or eventsub. As to the 403 depends on the transport for what advice is to be given: webhooks/conduits - create a user token with the needed scopes between the user in question and the clientID - then create an app access token and create subscriptions websockets - use create a user token with the needed scopes - away you go, connect to the socket and go your errors sounds like webhooks/conduits and potentially juggiling client ID’s ---
**Author:** ![leonardo.rivaldo](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/leonardo.rivaldo/32/30706_2.png) [@leonardo.rivaldo](https://discuss.dev.twitch.com/u/leonardo.rivaldo)\ **Post date:** [May 5, 2025, 9:02pm UTC](https://discuss.dev.twitch.com/t/authorization-scopes-problem/63499/3 "2025-05-05T21:02:06Z")
> [@BarryCarlyon](#): > > nnect to the i’m using websocket, thanks anyways ---
**Author:** ![BarryCarlyon](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/barrycarlyon/32/253_2.png) [@BarryCarlyon](https://discuss.dev.twitch.com/u/BarryCarlyon)\ **Post date:** [May 6, 2025, 9:48am UTC](https://discuss.dev.twitch.com/t/authorization-scopes-problem/63499/4 "2025-05-06T09:48:30Z")
Then theres nothing obviously wrong here. You have a _lot_ of scopes in that list but the needed scopes for the `channel.channel_points_custom_reward.add` type ([EventSub Subscription Types | Twitch Developers](https://dev.twitch.tv/docs/eventsub/eventsub-subscription-types/#channelchannel_points_custom_rewardadd)) is present, which is `channel:read:redemptions` (or it’s manage counter part) This is code flow so you did exchange the resulting code for an access token? Normal under “staight” websockets you’d expect implict auth here since this would be userland side. ---
**Author:** ![system](https://d2opxh93rbxzdn.cloudfront.net/original/2X/0/05909729875cce3b53e59d5561c4d23bb14948fc.png) [@system](https://discuss.dev.twitch.com/u/system)\ **Post date:** [June 5, 2025, 9:49am UTC](https://discuss.dev.twitch.com/t/authorization-scopes-problem/63499/5 "2025-06-05T09:49:06Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.