title: Google Calendar API 403 Forbidden on event creation
body: <p>I'm stuck and Googles documentation isn't any help at all.</p>
  
  <p>I have authenticated the app with the appropriate scopes. I get the consent screen and the refresh token is stored correctly.</p>
  
  <p>I'm able to view calendars on the user, but when I try to insert an event I get the 403 Forbidden error.</p>
  
  <p>This is the code I'm using to add an event. (The same code was working before I added offline access)</p>
  
  <pre><code>UserCredential credential = GetCredential(user.Username);
  
  if (credential != null)
  {
      CalendarService service = new CalendarService(new BaseClientService.Initializer()
      {
          HttpClientInitializer = credential,
          ApplicationName = "OO Software Service System",
      });
  
      //Create the event.
      Event e = new Event()
      {
          Attendees = new List&lt;EventAttendee&gt; 
          {
              new EventAttendee() 
              {
                  Id = user.GoogleId, 
                  Email = user.Username
              }
          },
          Start = new EventDateTime()
          {
              DateTime = start
          },
          End = new EventDateTime()
          {
              DateTime = end
          },
          Created = DateTime.Now,
          Summary = eventName
      };
  
      //Insert the event into the calendar.
      e = service.Events.Insert(e, "primary").Execute();
  </code></pre>
  
  <p>Scope and Credentials:</p>
  
  <pre><code>public static string[] GetScopes()
  {
      return new string[] { CalendarService.Scope.Calendar, PlusService.Scope.PlusMe };
  }
  
  public static UserCredential GetCredential(string username)
  {
      return GoogleWebAuthorizationBroker.AuthorizeAsync(
          GetSecrets(),
          GetScopes(),
          username,
          CancellationToken.None,
          new ServiceSystemDataStore()).Result;
  }
  </code></pre>
  
  <p>Is there anyone who can shed some light on what the problem could be? An error saying 403 Forbidden domain isn't exactly helpful. </p>
  
  <p>I have of course enabled the necessary APIs in the Google Console and the scope is the correct one, since I get the refresh token by authenticating the user with the consent screen.</p>