Unable to perform getOrders / Error - Insufficient permissions to fulfill the request about ebay-api

[dantio]

We also using Express as Backend. I don't know what exactly is the error. Here is how we do the call, maybe it helps:

const eBay = new eBayApi({
  // ....
  scope: [
          'https://api.ebay.com/oauth/api_scope',
          'https://api.ebay.com/oauth/api_scope/sell.marketing.readonly',
          'https://api.ebay.com/oauth/api_scope/sell.marketing',
          'https://api.ebay.com/oauth/api_scope/sell.inventory.readonly',
          'https://api.ebay.com/oauth/api_scope/sell.inventory',
          'https://api.ebay.com/oauth/api_scope/sell.account.readonly',
          'https://api.ebay.com/oauth/api_scope/sell.account',
          'https://api.ebay.com/oauth/api_scope/sell.fulfillment.readonly',
          'https://api.ebay.com/oauth/api_scope/sell.fulfillment',
          'https://api.ebay.com/oauth/api_scope/sell.analytics.readonly',
          'https://api.ebay.com/oauth/api_scope/sell.finances',
          'https://api.ebay.com/oauth/api_scope/sell.payment.dispute',
          'https://api.ebay.com/oauth/api_scope/commerce.identity.readonly'
        ]
});

const token = await getFromDb(); // get the token that was created in the ebay sign in process
eBay.setCredentials(token);

// Listen to refresh token event, and update the token in the DB
eBay.OAuth2.on('refreshAuthToken', (token: any) => {
      storeInDb(token).then(() => console.log('token is stored'))
});

eBay.sell.fulfillment.getOrders({
  limit: 5
}).then(order => {
  console.log('order', JSON.stringify(order, null, 2));
}).catch(e => {
  console.error(JSON.stringify(e, null, 2));
});

Check if you always use the same scope for sign in and API request.
You have to generate the first token with all scopes you need for you app.
If you add a new scopes later and use a token that was not authorized with this scope, it will not work!
I'm sure that refreshing the token will also not help. You have to obtain the token already with all required scopes!

Btw. You don't need to refresh it manually. It's done automatically. You can listen to the event and store the token (as shown in the example above)

[doverradio]

Thank you, it completely works now for me. In the end, it was passing in the original complete token object that solved it...

  let user = await User.findById({_id})
  
  // set OAuth2 eBay credentials
  eBay.auth.oAuth2.setCredentials(user.token[0])