Error 403 | Not enough permissions to access: me.GET.NO__VERSION

[rodnnnney]

I am trying to get a linkedIn Dev app working, I want to be able to automate posts on Linkedin but I'm running into some auth problems. To automate posts, it requires a urn:li:person and that is what I seem to have trouble getting.

I've set up the following components and running into the following issues.

This is authtoken with the email, openid, profile, w_member_social.

Sign In with LinkedIn using OpenID Connect and Share on LinkedIn

I am running:

curl -X GET -H "Authorization: Bearer <TOKEN>" https://api.linkedin.com/v2/me

But I am getting a

{"status":403,"serviceErrorCode":100,"code":"ACCESS_DENIED","message":"Not enough permissions to access: me.GET.NO_VERSION"} <= I am using the access code from above with email, openid, profile, w_member_social permissions.

I've also tried: https://learn.microsoft.com/en-us/linkedin/shared/authentication/client-credentials-flow?tabs=cURL1#step-3-make-api-requests

with the 2 legged auth where you structure the request like:

curl --location --request POST 'https://www.linkedin.com/oauth/v2/accessToken' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'grant_type=client_credentials' \
--data-urlencode 'client_id={your_client_id}' \
--data-urlencode 'client_secret={your_client_secret}'

Then I get this error of {"error":"access_denied","error_description":"This application is not allowed to create application tokens"}

Any help would be appreciated!

[ruchernchong]

What is your implementation like?

Your author should be urn:li:person:${me.data.sub}

[plaban1981]

@ruchernchong
I also encounter the same error

{'status': 403,
 'serviceErrorCode': 100,
 'code': 'ACCESS_DENIED',
 'message': 'Not enough permissions to access: me.GET.NO_VERSION'}

The code executed is as follows:

def user_info(headers):
    '''
    Get user information from Linkedin
    '''
    response = requests.get('https://api.linkedin.com/v2/me', headers = headers)
    user_info = response.json()
    return user_info

The access token is successfully generated

[ruchernchong]

@ruchernchong I also encounter the same error

{'status': 403,
 'serviceErrorCode': 100,
 'code': 'ACCESS_DENIED',
 'message': 'Not enough permissions to access: me.GET.NO_VERSION'}

The code executed is as follows:

def user_info(headers):
    '''
    Get user information from Linkedin
    '''
    response = requests.get('https://api.linkedin.com/v2/me', headers = headers)
    user_info = response.json()
    return user_info

The access token is successfully generated

The API you used is no longer working now.

Change https://api.linkedin.com/v2/me to https://api.linkedin.com/v2/userinfo

You can reference from: https://github.com/sgcarstrends/social-media-publisher/blob/a47b85216f4d85c24511146de7eba4607efa50d3/src/index.ts#L63. I am using the LinkedIn SDK instead

[plaban1981]

@ruchernchong
I now encounter

{'status': 403,
 'serviceErrorCode': 100,
 'code': 'ACCESS_DENIED',
 'message': 'Not enough permissions to access: userinfo.GET.NO_VERSION'}

Code Used:

import json
import random
import requests
import string
 
def auth(credentials):
    '''
    Run the Authentication.
    If the access token exists, it will use it to skip browser auth.
    If not, it will open the browser for you to authenticate.
    You will have to manually paste the redirect URI in the prompt.
    '''
    creds = read_creds(credentials)
    print(creds)
    client_id, client_secret = creds['client_id'], creds['client_secret']
    redirect_uri = creds['redirect_uri']
    api_url = 'https://www.linkedin.com/oauth/v2' 
         
    if 'access_token' not in creds.keys(): 
        args = client_id,client_secret,redirect_uri
        auth_code = authorize(api_url,*args)
        access_token = refresh_token(auth_code,*args)
        creds.update({'access_token':access_token})
        save_token(credentials,creds)
    else: 
        access_token = creds['access_token']
    return access_token
 
def headers(access_token):
    '''
    Make the headers to attach to the API call.
    '''
    headers = {
    'Authorization': f'Bearer {access_token}',
    'cache-control': 'no-cache',
    'X-Restli-Protocol-Version': '2.0.0'
    }
    return headers
 
def read_creds(filename):
    '''
    Store API credentials in a safe place.
    If you use Git, make sure to add the file to .gitignore
    '''
    with open(filename) as f:
        credentials = json.load(f)
    return credentials
 
def save_token(filename,data):
    '''
    Write token to credentials file.
    '''
    data = json.dumps(data, indent = 4) 
    with open(filename, 'w') as f: 
        f.write(data)
 
def create_CSRF_token():
    '''
    This function generate a random string of letters.
    It is not required by the Linkedin API to use a CSRF token.
    However, it is recommended to protect against cross-site request forgery
    For more info on CSRF https://en.wikipedia.org/wiki/Cross-site_request_forgery
    '''
    letters = string.ascii_lowercase
    token = ''.join(random.choice(letters) for i in range(20))
    return token
 
def open_url(url):
    '''
    Function to Open URL.
    Used to open the authorization link
    '''
    import webbrowser
    print(url)
    webbrowser.open(url)
 
def parse_redirect_uri(redirect_response):
    '''
    Parse redirect response into components.
    Extract the authorized token from the redirect uri.
    '''
    from urllib.parse import urlparse, parse_qs
 
    url = urlparse(redirect_response)
    url = parse_qs(url.query)
    return url['code'][0]
 
def authorize(api_url,client_id,client_secret,redirect_uri):
    # Request authentication URL
    csrf_token = create_CSRF_token()
    params = {
        'response_type': 'code',
        'client_id': client_id,
        'redirect_uri': redirect_uri,
        'state': csrf_token,
        'scope': 'w_member_social'
        }
 
    response = requests.get(f'{api_url}/authorization',params=params)
 
    print(f'''
    The Browser will open to ask you to authorize the credentials.\n
    Since we have not setted up a server, you will get the error:\n
    This site can’t be reached. localhost refused to connect.\n
    This is normal.\n
    You need to copy the URL where you are being redirected to.\n
    ''')
 
    open_url(response.url)
 
    # Get the authorization verifier code from the callback url
    redirect_response = input('Paste the full redirect URL here:')
    auth_code = parse_redirect_uri(redirect_response)
    return auth_code
 
def refresh_token(auth_code,client_id,client_secret,redirect_uri):
    '''
    Exchange a Refresh Token for a New Access Token.
    '''
    access_token_url = 'https://www.linkedin.com/oauth/v2/accessToken'
 
    data = {
        'grant_type': 'authorization_code',
        'code': auth_code,
        'redirect_uri': redirect_uri,
        'client_id': client_id,
        'client_secret': client_secret
        }
 
    response = requests.post(access_token_url, data=data, timeout=30)
    response = response.json()
    print(response)
    access_token = response['access_token']
    return access_token
#
def user_info(headers):
    '''
    Get user information from Linkedin
    '''
    response = requests.get('https://api.linkedin.com/v2/userinfo', headers = headers)
    user_info = response.json()
    return user_info
 
if __name__ == '__main__':
    credentials = 'credentials.json'
    access_token = auth(credentials)
    
    headers_ = headers(access_token) 
    # Get user id to make a UGC post
    print(headers_)
    user_info = user_info(headers_)
    print(user_info)
    urn = user_info['id']
    
    # UGC will replace shares over time.
    api_url = 'https://api.linkedin.com/v2/ugcPosts'
    author = f'urn:li:person:{urn}'
    message = '''
    Interested to automate LinkedIn using #Python and the LinkedIn API? 
    Read this in-depth Python for #SEO post by Jean-Christophe Chouinard.
    Proof being, I just made this post using the LinkedIn API
    '''
    link = 'https://www.jcchouinard.com/how-to-use-the-linkedin-api-python/'
    link_text = 'Complete tutorial using the LinkedIn API'
    
    post_data = {
        "author": author,
            "lifecycleState": "PUBLISHED",
            "specificContent": {
                "com.linkedin.ugc.ShareContent": {
                    "shareCommentary": {
                        "text": message
                    },
                    "shareMediaCategory": "ARTICLE",
                    "media": [
                        {
                            "status": "READY",
                            "description": {
                                "text": message
                            },
                            "originalUrl": link,
                            "title": {
                                "text": link_text
                            }
                        }
                    ]
                }
            },
            "visibility": {
                "com.linkedin.ugc.MemberNetworkVisibility": "CONNECTIONS"
            }
        }
    #
    r = requests.post(api_url, headers=headers, json=post_data)
    print(r.json())

[plaban1981]

@ruchernchong

When I use the below code

def user_info(headers):
    '''
    Get user information from Linkedin
    '''
    response = requests.get('https://api.linkedin.com/v2/userinfo', headers = headers)
    print(response)
    user_info = response.json()
    return user_info

I get the below response

user_info: {'sub': 'kfW51gr4Ja', 'email_verified': True, 'name': 'Plaban Nayak', 'locale': {'country': 'US', 'language': 'en'}, 'given_name': 'Plaban', 'family_name': 'Nayak', 'email': 'nayakpplaban@gmail.com', 'picture': 'https://media.licdn.com/dms/image/v2/C4D03AQFTPlIx0kQ5mw/profile-displayphoto-shrink_100_100/profile-displayphoto-shrink_100_100/0/1517262273935?e=1741824000&v=beta&t=VqfZX59LowILSm967vtbsO54Bt2C3B6Cc4pITESCUYk'}

can you advisw what would be the URN from the above info

[ruchernchong]

@ruchernchong

When I use the below code

def user_info(headers):

    '''

    Get user information from Linkedin

    '''

    response = requests.get('https://api.linkedin.com/v2/userinfo', headers = headers)

    print(response)

    user_info = response.json()

    return user_info

I get the below response

user_info: {'sub': 'kfW51gr4Ja', 'email_verified': True, 'name': 'Plaban Nayak', 'locale': {'country': 'US', 'language': 'en'}, 'given_name': 'Plaban', 'family_name': 'Nayak', 'email': 'nayakpplaban@gmail.com', 'picture': 'https://media.licdn.com/dms/image/v2/C4D03AQFTPlIx0kQ5mw/profile-displayphoto-shrink_100_100/profile-displayphoto-shrink_100_100/0/1517262273935?e=1741824000&v=beta&t=VqfZX59LowILSm967vtbsO54Bt2C3B6Cc4pITESCUYk'}

can you advisw what would be the URN from the above info

It's the sub

[plaban1981]

@ruchernchong
Thanks it worked

[ivanperez-keera]

This is not working for me:

{'status': 403, 'serviceErrorCode': 100, 'code': 'ACCESS_DENIED', 'message': 'Not enough permissions to access: userinfo.GET.NO_VERSION'}