Regarding JWT Metascope | Community
Skip to main content
Level 2
November 7, 2019
Solved

Regarding JWT Metascope

  • November 7, 2019
  • 1 reply
  • 6425 views

Hi,

I am trying to automate the manual process of creating Property, etc using Launch API.

I generated JWT programmatically so that I can exchange it for an access token. However, access token can not be obtained as I am getting the following error on my terminal:

{"error_description":"The metascopes in the JWT are not a subset of the metascopes in the binding.","error":"invalid_scope"}

I have gone through: https://www.adobe.io/authentication/auth-methods.html#!AdobeDocs/adobeio-auth/master/JWT/Scopes.md​, which shows the API-specific metascope.

I am sure I have included it correctly in my program, also User Management API and I/O Management API is enabled under Services tab in my Adobe Console Integration, of which credentials are being used.

Help is appreciated.

Thanks

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by harishkumar

@jayg26932123  issue is related to payload data where you have incorrect url of metascope. Please check the jwt tab in the Adobe IO integration , you will get the correct url required for the payload. I faced the similar issue and after taking the metscope mentioned in the integration, it worked for me. I got the access token using python programming. 

1 reply

harishkumar
harishkumarAccepted solution
Level 2
January 28, 2020

@jayg26932123  issue is related to payload data where you have incorrect url of metascope. Please check the jwt tab in the Adobe IO integration , you will get the correct url required for the payload. I faced the similar issue and after taking the metscope mentioned in the integration, it worked for me. I got the access token using python programming. 

September 24, 2021

Thank you so much harish.You made my day

Level 4
October 10, 2022

I still didn't get it. The url I am using is `/ims/exchange/jwt/` with the prefix as `https://ims-na1.adobelogin.com`. However I am not sure about metascope?

 

This is my metascope: `https://ims-na1.adobelogin.com/s/ent_aem_cloud_api` and this is how jsonPayload looks like:

 

const jwtPayload = {
		exp: Math.round(300 + Date.now() / 1000),
		iss: orgId,
		sub: technicalAccountId,
		aud: `${ims}/c/${clientId}`,
		[`${ims}/s/${metaScope}`]: true,
	};

Can someone help me understand what's going wrong here?