# EventSub : subscription missing proper authorization

**URL:** <https://staging-discuss.dev.twitch.com/t/eventsub-subscription-missing-proper-authorization/33637>\
**Category:** API\
**Created:** [September 24, 2021, 8:15am UTC](https://staging-discuss.dev.twitch.com/t/eventsub-subscription-missing-proper-authorization/33637 "2021-09-24T08:15:55Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Teyz](https://d1d6mrmdu7ztse.cloudfront.net/user_avatar/staging-discuss.dev.twitch.com/teyz/32/12749_2.png) [@Teyz](https://staging-discuss.dev.twitch.com/u/Teyz)\
**Post date:** [September 24, 2021, 8:15am UTC](https://staging-discuss.dev.twitch.com/t/eventsub-subscription-missing-proper-authorization/33637/1 "2021-09-24T08:15:55Z")

</div>

Hello,

I got a app bearer token using : [https://id.twitch.tv/oauth2/token](https://id.twitch.tv/oauth2/token) with grant\_type : client\_credentials  
But when I want to use it to create subscription for Eventsub I have this error :

 ![image](https://d2spem0quai2ol.cloudfront.net/original/2X/0/006748044c8abb7af4b562b079c862c2e96faebe.png)

Can you tell me why ?

---

<div class="post-metadata">

**Author:** ![BarryCarlyon](https://d1d6mrmdu7ztse.cloudfront.net/user_avatar/staging-discuss.dev.twitch.com/barrycarlyon/32/253_2.png) [@BarryCarlyon](https://staging-discuss.dev.twitch.com/u/BarryCarlyon)\
**Post date:** [September 24, 2021, 11:15am UTC](https://staging-discuss.dev.twitch.com/t/eventsub-subscription-missing-proper-authorization/33637/2 "2021-09-24T11:15:46Z")

</div>

Which Topic?

This suggests you tried to create a subscription for a privledged topic.  
Such as subscribers.

But you don’t have permission to read subscribers for that streamer

---

<div class="post-metadata">

**Author:** ![Teyz](https://d1d6mrmdu7ztse.cloudfront.net/user_avatar/staging-discuss.dev.twitch.com/teyz/32/12749_2.png) [@Teyz](https://staging-discuss.dev.twitch.com/u/Teyz)\
**Post date:** [September 24, 2021, 11:50am UTC](https://staging-discuss.dev.twitch.com/t/eventsub-subscription-missing-proper-authorization/33637/3 "2021-09-24T11:50:45Z")

</div>

For this :

 ![image](https://d2spem0quai2ol.cloudfront.net/original/2X/b/b79113337281414079177990e7a5f156316527cb.png)  
And if I try with :  
 ![image](https://d2spem0quai2ol.cloudfront.net/original/2X/9/9bda242a963a2298942a25ccf425999a17420f10.png)

---

<div class="post-metadata">

**Author:** ![BarryCarlyon](https://d1d6mrmdu7ztse.cloudfront.net/user_avatar/staging-discuss.dev.twitch.com/barrycarlyon/32/253_2.png) [@BarryCarlyon](https://staging-discuss.dev.twitch.com/u/BarryCarlyon)\
**Post date:** [September 24, 2021, 11:53am UTC](https://staging-discuss.dev.twitch.com/t/eventsub-subscription-missing-proper-authorization/33637/4 "2021-09-24T11:53:47Z")

</div>

Your ClientID doesn’t have authorisation to read subscription information for the requested broadcaster ID.

You need to do a user authentication flow for that broadcaster to obtain permission.

So: obtain a User Access Token with the relevant scopes via a normal oAuth (the discard it or keep it, I usually keep it so I can do “my service was down” catch ups and resyncs)  
Then use your App Access Token (no user attached) to create the subscriptions

I wrote futher on the duality of EventSub here:

> **[How does Twitch’s new EventSub work?](https://barrycarlyon.co.uk/wordpress/2021/02/03/how-does-twitchs-new-eventsub-work/)**
>
> Preamble In the beginning, Twitch created Webhooks. And the world rejoiced, finally we no longer have to long poll for things such as followers! Hurrah! But it came with a gotcha, since Twitch Webh…

---

<div class="post-metadata">

**Author:** ![Teyz](https://d1d6mrmdu7ztse.cloudfront.net/user_avatar/staging-discuss.dev.twitch.com/teyz/32/12749_2.png) [@Teyz](https://staging-discuss.dev.twitch.com/u/Teyz)\
**Post date:** [September 24, 2021, 3:52pm UTC](https://staging-discuss.dev.twitch.com/t/eventsub-subscription-missing-proper-authorization/33637/5 "2021-09-24T15:52:57Z")

</div>

When I use authentication user with login button and I used the token, I have this error :

 ![image](https://d2spem0quai2ol.cloudfront.net/original/2X/9/9bca347d81bf1bfd733752b62429ec539a80b42f.png)

---

<div class="post-metadata">

**Author:** ![BarryCarlyon](https://d1d6mrmdu7ztse.cloudfront.net/user_avatar/staging-discuss.dev.twitch.com/barrycarlyon/32/253_2.png) [@BarryCarlyon](https://staging-discuss.dev.twitch.com/u/BarryCarlyon)\
**Post date:** [September 24, 2021, 4:56pm UTC](https://staging-discuss.dev.twitch.com/t/eventsub-subscription-missing-proper-authorization/33637/6 "2021-09-24T16:56:36Z")

</div>

You need to user authenticate to get permissions for your ClientID

And THEN use the App Access Token with EventSub.  
EventSub only supports App Access Tokens.

> [@BarryCarlyon](#):
>
> So: obtain a User Access Token with the relevant scopes via a normal oAuth (the discard it or keep it, I usually keep it so I can do “my service was down” catch ups and resyncs)  
> Then use your App Access Token (no user attached) to create the subscriptions

---

<div class="post-metadata">

**Author:** ![system](https://d2spem0quai2ol.cloudfront.net/original/2X/0/05909729875cce3b53e59d5561c4d23bb14948fc.png) [@system](https://staging-discuss.dev.twitch.com/u/system)\
**Post date:** [October 24, 2021, 4:57pm UTC](https://staging-discuss.dev.twitch.com/t/eventsub-subscription-missing-proper-authorization/33637/7 "2021-10-24T16:57:31Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
