HTTP 403 - "User to be acted on does not match subject in bearer token"
Last Updated:
Overview
Using the Management API with an M2M Application.
client gets HTTP 403 responses for user read requests.
The following Error occurs: "com.auth0.exception.APIException: Request failed with status code 403: User to be acted on does not match subject in bearer token."
Steps to reproduce
- Create M2M application and new API
- Add scopes with "current_user" scopes to the API
- User the management API using an access_token with this API
Applies To
- HTTP 403 error
- current_user scope
- M2M application
Cause
Having "current_user" scopes in a M2M app conflicts and returns the error.
Solution
The workaround solution is to:
- Omit `current_user` scopes when requesting the tokens for the M2M app.