topic Re: Paragon and contacts scope in APIs & Integrations

Paragon and contacts scope

LMenghini — Wed, 17 Aug 2022 14:52:09 GMT

Hello everyone. I'm using Paragon to authenticate to Hubspot, and using their SDK to make my API calls. I'm trying to fetch the deals, but upon running the following code

const res = await paragon.request("hubspot", "/crm/v3/objects/deals", { method: "GET" });

I get back the following error:

{ ... "errors": [ { "message": "One or more of the following scopes are required.", "context": { "requiredScopes": ["contacts"] } } ], ... }

But, I thought the contacts scope had been deprecated in favour of crm.objects.contacts.read and crm.objects.contacts.write (which I actually have).

What gives? There is some complications in that Paragon won't allow me to add the missing scope (as they have flagged it as deprecated or so it seems) so I'm trying to figure out what's wrong. Can anyone help?

Re: Paragon and contacts scope

Jaycee_Lewis — Thu, 18 Aug 2022 15:51:23 GMT

Hi, @LMenghini 👋 Thanks for reaching out. It will be easier to split this out into two parts, I think.

Paragon questions —

To confirm, this is the product you are referring to, correct? Paragon — HubSpot
Looking at your code sample, it looks like you are calling the Deals API. Is that correct?
If so, can you grab a screenshot of the scopes in your private app? Similar to this one

HubSpot side:

Can you go here – Deals API > Get Deal by ID

GET /crm/v3/objects/deals/{dealId}

You can use a private app with only the two granular scopes shown above, and it will work as expected from our end

My quick test
Request

curl --request GET \ --url 'https://api.hubapi.com/crm/v3/objects/deals/9786091184?archived=false' \ --header 'authorization: Bearer YOUR_ACCESS_TOKEN'

Response

HTTP 200 { "id": "9786091184", "properties": { "amount": null, "closedate": "2022-09-01T00:05:39.484Z", "createdate": "2022-08-11T00:05:47.455Z", "dealname": "Hire some cats", "dealstage": "appointmentscheduled", "hs_lastmodifieddate": "2022-08-12T19:16:15.308Z", "hs_object_id": "9786091184", "pipeline": "default" }, "createdAt": "2022-08-11T00:05:47.455Z", "updatedAt": "2022-08-12T19:16:15.308Z", "archived": false }

It will not be possible to trouble shoot the Paragon side of things. Our best move is to verify the endpoint works while using the minimum required scopes.

My suggestion is to verify you have the granular scopes for deals added. If the issue persists, I'd reach out to Paragon support and inquire why their app is attempting to use a depreciated scope instead of the granular scopes. Here's an article with more details — Contacts scope migration for app partners.

Hey, @JBeatty @LMeert @miljkovicmisa do you have any additional thoughts on troubleshooting here?

Thank you very much! — Jaycee

Re: Paragon and contacts scope

LMenghini — Thu, 18 Aug 2022 19:39:29 GMT

Hey Jaycee, thanks for replying! Turns out the issue was way easier than expected: the API was just lying straight to my face. The error message as you can see above explicitly states that the missing scope was "contacts". It was not: it was "crm.objects.deals.read". Extremely simple fix, but I believe that somewhere in the Hubspot code there might be an error and that very misleading message gets generated.