Title: Error 403 upon Authentication
Last modified: December 2, 2018

---

# Error 403 upon Authentication

 *  Resolved [woodyns](https://wordpress.org/support/users/woodyns/)
 * (@woodyns)
 * [7 years, 6 months ago](https://wordpress.org/support/topic/error-403-upon-authentication/)
 * I have been trying to solve this issue for 1 day now to no avail. When I try 
   to authenticate in order to get a token, I get the below error. How to fix?
 * 403 – Forbidden Error
    You are not allowed to access this address. If the error
   persists, please contact the website webmaster. If you are the webmaster of this
   site please log in to Cpanel and check the Error Logs. You will find the exact
   reason for this error there.
 * Common reasons for this error are:
 * Incorrect file/directory permissions: Below 644.
    In order files to be read by
   the webserver, their permissions have to be equal or above 644. You can update
   file permissions with a FTP client or through cPanel’s File Manager.
 * Restrictive Apache directives inside .htaccess file.
    There are two Apache directives
   which can cause this error – ‘Deny from’ and ‘Options -Indexes’.

Viewing 8 replies - 1 through 8 (of 8 total)

 *  Plugin Author [Sayontan Sinha](https://wordpress.org/support/users/sayontan/)
 * (@sayontan)
 * [7 years, 6 months ago](https://wordpress.org/support/topic/error-403-upon-authentication/#post-10938983)
 * Which provider is this for? Google, or Flickr, or Instagram, or SmugMug? Can 
   you provide me with some screenshots? Have you set up the API keys and secrets
   appropriately?
 *  Thread Starter [woodyns](https://wordpress.org/support/users/woodyns/)
 * (@woodyns)
 * [7 years, 6 months ago](https://wordpress.org/support/topic/error-403-upon-authentication/#post-10939260)
 * 1- for Google photos
    2- Yes I set up the API keys correctly
 * You can check the screenshots here [Authentication Error Screenshots](https://www.dropbox.com/s/j4uydsqsxbmfaxo/Screenshots.rar?dl=0)
 *  Plugin Author [Sayontan Sinha](https://wordpress.org/support/users/sayontan/)
 * (@sayontan)
 * [7 years, 6 months ago](https://wordpress.org/support/topic/error-403-upon-authentication/#post-10939264)
 * Thank you for this information. It looks like there is a conflict with a plugin
   here.
 * There is a workaround you can employ, though. Please follow the steps I have 
   outlined in [this post](https://wordpress.org/support/topic/cant-authorize-google-photos-2/#post-10861322).
   Let me know if you face any issues.
 *  Thread Starter [woodyns](https://wordpress.org/support/users/woodyns/)
 * (@woodyns)
 * [7 years, 6 months ago](https://wordpress.org/support/topic/error-403-upon-authentication/#post-10939419)
 * I am getting this when I click to Authorize APIs.
 * 400. That’s an error.
 * Error: redirect_uri_mismatch
 * The redirect URI in the request, [https://developers.google.com/oauthplayground](https://developers.google.com/oauthplayground),
   does not match the ones authorized for the OAuth client. To update the authorized
   redirect URIs, visit: [https://console.developers.google.com/apis/credentials/oauthclient/503817040632-8tdht7ad2rcagb9lm7oj0kbj0em0ulr7.apps.googleusercontent.com?project=5038170406](https://console.developers.google.com/apis/credentials/oauthclient/503817040632-8tdht7ad2rcagb9lm7oj0kbj0em0ulr7.apps.googleusercontent.com?project=5038170406)
 *  Plugin Author [Sayontan Sinha](https://wordpress.org/support/users/sayontan/)
 * (@sayontan)
 * [7 years, 6 months ago](https://wordpress.org/support/topic/error-403-upon-authentication/#post-10939428)
 * Google seems to have made a change to this since I originally posted the workaround…
   if you read the message on the right where you “Use your own OAuth credentials”,
   you will see this message:
 * > You will need to list the URL [https://developers.google.com/oauthplayground](https://developers.google.com/oauthplayground)
   > as a valid redirect URI in your Google APIs Console’s project.
 * So I am guessing, if you add “[https://developers.google.com/oauthplayground&#8221](https://developers.google.com/oauthplayground&#8221);
   to your redirect URL list you should be fine. After you have finished the entire
   authentication process you can delete this URL.
 *  Thread Starter [woodyns](https://wordpress.org/support/users/woodyns/)
 * (@woodyns)
 * [7 years, 6 months ago](https://wordpress.org/support/topic/error-403-upon-authentication/#post-10939476)
 * I would like to thank you for being so helpful and professional. What an amazing
   plugin. Really I thank you so much!!
 *  [dnrew](https://wordpress.org/support/users/dnrew/)
 * (@dnrew)
 * [7 years, 6 months ago](https://wordpress.org/support/topic/error-403-upon-authentication/#post-10975024)
 * Thank you for you reply, [@sayontan](https://wordpress.org/support/users/sayontan/),
   in your previous thread (Can’t authorize Google Photos). I’m hanging in there,
   trying to make this work. I’ve added the “https://developers.google.com/oauthplayground”
   to my redirect URL list. Now Google is talking about scopes, referring to the
   list of API’s entered next to “Authorise API” in the Playground
 * 400. That’s an error.
 * Error: invalid_scope
 * Some requested scopes were invalid. {valid=[https://www.googleapis.com/auth/photoslibrary.
   readonly, [https://www.googleapis.com/auth/photoslibrary.sharing](https://www.googleapis.com/auth/photoslibrary.sharing),
   [https://picasaweb.google.com/data/%5D](https://picasaweb.google.com/data/%5D),
   invalid=[https://developers.google.com/oauthplayground], noncanonical=[https://
   picasaweb.google.com/data/([https://www.googleapis.com/auth/photos](https://www.googleapis.com/auth/photos))]}
 * I’m obviously out of my depth here, unfortunately. I believe the issue may be
   my configuration details that I provided i the “OAuth consent screen”: the only
   items I need to add: Application Name (Photonic WordPress Plugin); choose a support
   e-mail address, and declare the “Authorized Domains”, correct?
 * Thank you
 *  Plugin Author [Sayontan Sinha](https://wordpress.org/support/users/sayontan/)
 * (@sayontan)
 * [7 years, 6 months ago](https://wordpress.org/support/topic/error-403-upon-authentication/#post-10975116)
 * [@dnrew](https://wordpress.org/support/users/dnrew/),
    As I mentioned on the 
   other thread, please don’t post on threads marked “resolved” – apart from not
   being monitored, doing so also sends a notification out to the original poster,
   often without them wishing to be notified.
 * > Now Google is talking about scopes, referring to the list of API’s entered 
   > next to “Authorise API” in the Playground
 * Indeed it is. What did you put in there? You should only have these three things,
   each separated by a space from the other:
    `https://www.googleapis.com/auth/photoslibrary.
   readonly https://www.googleapis.com/auth/photoslibrary.sharing https://picasaweb.
   google.com/data/`
 * It looks like you have also pasted `https://developers.google.com/oauthplayground`
   there (this should only go to your redirect URLs).

Viewing 8 replies - 1 through 8 (of 8 total)

The topic ‘Error 403 upon Authentication’ is closed to new replies.

 * ![](https://ps.w.org/photonic/assets/icon.svg?rev=1972449)
 * [Photonic Gallery & Lightbox for Flickr, SmugMug & Others](https://wordpress.org/plugins/photonic/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/photonic/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/photonic/)
 * [Active Topics](https://wordpress.org/support/plugin/photonic/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/photonic/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/photonic/reviews/)

 * 8 replies
 * 3 participants
 * Last reply from: [Sayontan Sinha](https://wordpress.org/support/users/sayontan/)
 * Last activity: [7 years, 6 months ago](https://wordpress.org/support/topic/error-403-upon-authentication/#post-10975116)
 * Status: resolved