That error usually means that the scopes you set up for the app in the app settings don’t match the scopes you’re requesting in the scope= parameter for the authorize URL. Any scopes that you have selected in the app settings are considered required scopes, so you’d need to include everything you have selected in the scope= parameter.
If your app only requires the contacts, reports, and files scopes, only those three should be checked in the app settings.
That error usually means that the scopes you set up for the app in the app settings don’t match the scopes you’re requesting in the scope= parameter for the authorize URL. Any scopes that you have selected in the app settings are considered required scopes, so you’d need to include everything you have selected in the scope= parameter.
If your app only requires the contacts, reports, and files scopes, only those three should be checked in the app settings.