title: POSTMAN: Could not complete OAuth2.0 login
body: <p>I want to request a token in order I can have my Postman logged in my Gmail acocount and then I can call Google Cloud APIs.</p>
  
  <p>I am trying by typing my Gmail email address and its password as you can see from this picture</p>
  
  <p><a href="https://i.stack.imgur.com/Y5XG1.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/Y5XG1.png" alt="Postman Request Token"></a></p>
  
  <p>The final goal is get APIs like this </p>
  
  <pre><code>https://monitoring.googleapis.com/v1/projects/firetestjimis/dashboards
  </code></pre>
  
  <p>I can do it by login with my Gmail account from gcloud ("gcloud auth application-default login"), then print the token with gcloud auth application-default print-access-token, copy the printed token and paste it in Access Token (Postman). Well it works, but it is kind of obligating me to start gcloud and has it installed. I am pretty sure I can reach same idea by sign with same user I sign in gcloud. I just don't know how to do it with Postman. All I have read last hours drove me to the image I pasted above but it is failling with error from this question.</p>
  
  <p>In case it is relevant, here is the gcloud console where I get the token</p>
  
  <pre><code>C:\Program Files (x86)\Google\Cloud SDK&gt;gcloud auth application-default print-access-token
  C:\Program Files (x86)\Google\Cloud SDK\google-cloud-sdk\bin\..\lib\third_party\google\auth\_default.py:69: UserWarning: Your application has authenticated using end user credentials from Google Cloud SDK. We recommend that most server applications use service accounts instead. If your application continues to use end user credentials from Cloud SDK, you might receive a "quota exceeded" or "API not enabled" error. For more information about service accounts, see https://cloud.google.com/docs/authentication/
    warnings.warn(_CLOUD_SDK_CREDENTIALS_WARNING)
  ya29.a0Ae4lvC3-3WxUmx... removed token ... hs251yTql3eEE
  
  C:\Program Files (x86)\Google\Cloud SDK&gt;
  </code></pre>
  
  <p>*** Edited a bit after firstly posted</p>
  
  <p>Other tentative is resulting in </p>
  
  <pre><code>Erro 400: invalid_request
  Invalid parameter value for redirect_uri: Missing scheme: /
  </code></pre>
  
  <p>When I tried</p>
  
  <p><a href="https://i.stack.imgur.com/LL8xn.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/LL8xn.png" alt="Postman"></a></p>
  
  <p>The Client Id I copied from </p>
  
  <p><a href="https://i.stack.imgur.com/FKCTW.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/FKCTW.png" alt="https://console.developers.google.com/apis/credentials"></a></p>
  
  <p>*** edited after Madhead's suggestion</p>
  
  <p>I followed carefully all steps proposed and indeed I can get a Google Token straight from Postman by clicking on Get New Access Token. Nevetheless it gets </p>
  
  <pre><code>{
    "error": {
      "code": 403,
      "message": "Request had insufficient authentication scopes.",
      "status": "PERMISSION_DENIED"
    }
  }
  </code></pre>
  
  <p>For these two tentatives from Postman (pasted curl script since it is easier to evaluated from others than a Postman printscreen)</p>
  
  <pre><code>curl --location --request GET 'https://monitoring.googleapis.com/v1/projects/firetestjimis/dashboards' --header 'Authorization: Bearer ya29. *** token *** kO3Fg'
  
  curl --location --request POST 'https://firestore.googleapis.com/v1/projects/firetestjimis/databases/(default)/documents:runQuery' --header 'Authorization: Bearer ya29. *** token *** kO3Fg' --header 'Content-Type: application/json' --data-raw '{
  "structuredQuery": {
      "where" : {
          "fieldFilter" : { 
          "field": {"fieldPath": "id"}, 
          "op":"EQUAL", 
          "value": {"stringValue": "1"}
          }
      },
      "from": [{"collectionId": "transfer"}]
      }
  }'
  </code></pre>
  
  <p>Here is the OAuth Client ID created in <a href="https://console.cloud.google.com/apis/credentials?project=firetestjimis" rel="nofollow noreferrer">credentials screen</a></p>
  
  <pre><code>{"web":{"client_id":"7953 *** 5k6e9ivtdg.apps.googleusercontent.com","project_id":"firetestjimis","auth_uri":"https://accounts.google.com/o/oauth2/auth","token_uri":"https://oauth2.googleapis.com/token","auth_provider_x509_cert_url":"https://www.googleapis.com/oauth2/v1/certs","client_secret":"IJGCe *** Du6bU","redirect_uris":["https://oauth.pstmn.io/v1/callback"]}}
  </code></pre>
  
  <p>as downlowaded from</p>
  
  <p><a href="https://i.stack.imgur.com/lgehA.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/lgehA.png" alt="Google Cloud Plataform Credentials"></a></p>
  
  <p>And here is the <a href="https://i.stack.imgur.com/VJ3O3.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/VJ3O3.png" alt="OAuth consent screen"></a></p>
  
  <p>*** edited</p>
  
  <p><a href="https://i.stack.imgur.com/YLRaQ.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/YLRaQ.png" alt="Add Scorpe screen"></a></p>
  
  <p><a href="https://i.stack.imgur.com/s3930.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/s3930.png" alt="scope invalid"></a></p>
  
  <p>*** edited</p>
  
  <p><a href="https://i.stack.imgur.com/Z24Ip.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/Z24Ip.png" alt="trying add https://monitoring.googleapis.com/ as scope"></a></p>
  
  <ul>
  <li>edited</li>
  </ul>
  
  <p><a href="https://i.stack.imgur.com/w5zuO.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/w5zuO.png" alt="Nothing returned from Cloud Monitoring API"></a></p>
  
  <p>*** edited after succesfully added two scopes</p>
  
  <p>It says "Because you've added a sensitive scope, your consent screen requires verification by Google before it's published"</p>
  
  <p><a href="https://i.stack.imgur.com/45h2d.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/45h2d.png" alt="waiting for Google aproval"></a></p>
  
  <p>And when I clicked in "Submit for verification" I see it complaining of Application Homepage and Application Privacy links</p>
  
  <p><a href="https://i.stack.imgur.com/RWmTR.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/RWmTR.png" alt="complaining about two urls"></a></p>