# Products, ecommerce Scoping issue

**URL:** <https://community.hubspot.com/t/products-ecommerce-scoping-issue/68502>\
**Category:** APIs & Integrations\
**Created:** [November 3, 2022, 4:28pm UTC](https://community.hubspot.com/t/products-ecommerce-scoping-issue/68502 "2022-11-03T16:28:25Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![MontanaTravis](https://avatars.discourse-cdn.com/v4/letter/m/b4bc9f/32.png) [@MontanaTravis](https://community.hubspot.com/u/MontanaTravis)\
**Post date:** [November 3, 2022, 4:28pm UTC](https://community.hubspot.com/t/products-ecommerce-scoping-issue/68502/1 "2022-11-03T16:28:25Z")

</div>

Hey all,

So I when I run `curl` I get a response from:

**GET** /crm/v3/objects/products

In Postman there’s a juxtapostition though, it’s saying:

_**Authentication credentials not found. This API supports both API Key and OAuth 2.0 authentication and you can find more details at [Accounts Dashboard | HubSpot](https://developers.hubspot.com/docs/methods/auth/oauth-overview)**_

I have a private app, and I’m wanting to add a Products scope, currently when we try and pull the data (most of the scopes work) but “Products” shows “0” which I know after running cURL, is not correct. Is there any advice I could get.

I do have the e-commerce scope enabled.

---

<div class="post-metadata">

**Author:** ![Teun](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/teun/32/28739_2.png) [@Teun](https://community.hubspot.com/u/Teun)\
**Post date:** [November 3, 2022, 6:34pm UTC](https://community.hubspot.com/t/products-ecommerce-scoping-issue/68502/2 "2022-11-03T18:34:52Z")

</div>

Hi @MontanaTravis ,

Normally, the API would give a response that the scopes are not correct if that is the case.

This error makes it seem that you do not pass the private app token the right way. Did you set it in Postman through the ‘Authorization’ tab and did you select the ‘Bearer’ authentication method?  
If so, you could try adding the line item scopes.

---

<div class="post-metadata">

**Author:** ![MontanaTravis](https://avatars.discourse-cdn.com/v4/letter/m/b4bc9f/32.png) [@MontanaTravis](https://community.hubspot.com/u/MontanaTravis)\
**Post date:** [November 3, 2022, 6:46pm UTC](https://community.hubspot.com/t/products-ecommerce-scoping-issue/68502/3 "2022-11-03T18:46:17Z")

</div>

Hey Teun,

In Postman I did setup Bearer for the auth method. Can you elaborate on your suggestion a bit? Thnak you so much Teun!

---

<div class="post-metadata">

**Author:** ![Teun](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/teun/32/28739_2.png) [@Teun](https://community.hubspot.com/u/Teun)\
**Post date:** [November 3, 2022, 6:59pm UTC](https://community.hubspot.com/t/products-ecommerce-scoping-issue/68502/4 "2022-11-03T18:59:42Z")

</div>

Hi @MontanaTravis ,

I just tried with a private app token with only the e-commerce scope, and it worked just fine.

 ![Schermafbeelding 2022-11-03 om 19.58.10.png](https://d2qpr2jzcazej7.cloudfront.net/original/3X/b/9/b9020c21179ff629330a97ddcf7e148d9f76981b.png)

Are you sure that the scope is set correctly? And does your token start with pat-na1-xxxx

---

<div class="post-metadata">

**Author:** ![MontanaTravis](https://avatars.discourse-cdn.com/v4/letter/m/b4bc9f/32.png) [@MontanaTravis](https://community.hubspot.com/u/MontanaTravis)\
**Post date:** [November 3, 2022, 7:13pm UTC](https://community.hubspot.com/t/products-ecommerce-scoping-issue/68502/5 "2022-11-03T19:13:32Z")

</div>

Hey Teun,

These are the current scopes I have invoked. As you can see /objects/products does get a callback when I use cURL, but my question is if I wanted to integrate this into a data lake, there is no “Products” scope, so how would I pull the data from Products?

 ![Screenshot 2022-11-03 at 10.53.31 AM.png](https://d2qpr2jzcazej7.cloudfront.net/original/3X/8/9/892e4772f363a619d69d239fd795dd404b86d31b.png)

 ![Screenshot 2022-11-03 at 10.53.50 AM.png](https://d2qpr2jzcazej7.cloudfront.net/original/3X/4/a/4a64e4190a8db82382945abddcbb17b196ced286.png)

To your Auth question, the token definitely starts with pat-na1.

---

<div class="post-metadata">

**Author:** ![MontanaTravis](https://avatars.discourse-cdn.com/v4/letter/m/b4bc9f/32.png) [@MontanaTravis](https://community.hubspot.com/u/MontanaTravis)\
**Post date:** [November 7, 2022, 3:44pm UTC](https://community.hubspot.com/t/products-ecommerce-scoping-issue/68502/6 "2022-11-07T15:44:37Z")

</div>

Any updates?

---

<div class="post-metadata">

**Author:** ![Jassy](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/jassy/32/30131_2.png) [@Jassy](https://community.hubspot.com/u/Jassy)\
**Post date:** [November 7, 2022, 6:13pm UTC](https://community.hubspot.com/t/products-ecommerce-scoping-issue/68502/7 "2022-11-07T18:13:11Z")

</div>

Hey Team! Following up on this issue. It has been resolved, and was due to the response header formatting. be sure to remove your newlines ‘\n’ when pasting code over from examples on the web.
