Insufficient Scope for Requesting to Resend Email Verification

[tyf]

Hey there @supergrounded!

@supergrounded

However, when I call the POST /verification-email API it’s giving me insufficient_scope error, expecting update:users scope.

Are you just using the user’s access token in this scenario? If so, you won’t be able to add the update:users scope as even Management API tokens issued to a SPA are limited in scope.

Instead, you will need to make this call from a backend which handles getting a Management API access token, similar to what’s described in this FAQ:

How can I enable users to change their email address from a SPA or native app?

Question: How can I enable users to change their email address from a SPA or native app? Answer: Public clients (like SPAs and native applications) are restricted from requesting tokens for the management API with the proper scopes for updating a user’s email. These types of applications are limited to a few specific scopes. Because of these limitations, email change requests from public clients must flow through a backend or proxy API. This could be a serverless function with the sole purpose…