This oauth-token (XXX) does not have proper permissions! (requires any of [content-editor-access])


#1

Seeing a strange issue issue today. Our application interacts with the HubSpot API, accessing contacts, email content and also email events. We authenticate using OAuth2, and until today everything was working fine.

We are now seeing 403s when trying to GET email content from either of the following endpoints:

/cosemail/v1/emails/
/content/api/v2/emails/

It isn't clear from the documentation whether v1 or v2 is the currently supported endpoint for this operation, but the error on both is the same regardless. The response indicates that "This oauth-token (XXX) does not have proper permissions! (requires any of [content-editor-access])".

Our application is configured to request Content access:

And we include both contacts and content in the scope when authorising initially.

Are we doing something wrong, or is this a bug on the HubSpot end? We have tried de-authenticating, re-authenticating, creating a new test app for integration, all to no avail. Any help much appreciated!


#2

Hey,
We have the same problem... Re-enabling that API would be very very helpful to us.


#3

Sadly we have the same issue.
Are there any news on that?
Any workaround?


#4

I have not managed to find a workaround yet. This is extremely frustrating, particularly since this worked perfectly fine until yesterday.


#5

Hi @chrisloy abd @adams

Any endpoints not listed on developers.hubspot.com are considered internal APIs. Those APIs are subject to change at any time without notice, and it's against our API Terms to use any internal APIs for an integration.

That being said, in this specific case we have deployed a fix for the permissions error you were seeing, and you should be able to access those endpoints again.


#6

Hi @dadams,

Thank you so much for the help. Unfortunately we are still seeing the same error. Here is the response from an example request (I removed the token but I assume the rest is okay to share here):

{
    "correlationId": "2148e93d-af56-4781-903b-3ab621ccd323",
    "message": "This oauth-token (xxxx-redacted-xxxx) does not have proper permissions! (requires any of [content-editor-access])",
    "requestId": "01ca80ae23c9b39fe380fa3c93986bc9",
    "status": "error"
}

This was in response to a GET request to https://api.hubapi.com/cosemail/v1/emails/<email_id> and I see the same error at https://api.hubapi.com/content/api/v2/emails/<email_id>. The App ID for the integration is 176254 and this is using an approved, valid token with scope contacts and content, which works fine for the other endpoints listed.

I had not realised that these endpoints were not officially unsupported - they are however crucial to our integration, so any help you are able to offer is greatly appreciated! Thanks again.


#7

Sorry for the wait here, another fix has been deployed that should resolve this. You may need to refresh any existing access tokens before the endpoint will work, but new access tokens with the content scope should be able to access that endpoint again.


#8

Thank @dadams - that seems to be working just fine again! Really appreciate the help.