title: Google Play Android Developer API 401 Insufficient permissions
body: <p>I'm using <a href="https://developers.google.com/android-publisher/index" rel="noreferrer">Google Play Android Developer API</a> to server to server check subscription status of our users' subscriptions but after successful authorization and asking for an existing subscription I get the 401 response with the following message 'The current user has insufficient permissions to perform the requsted operation'. 
  Visiting <a href="https://www.googleapis.com/oauth2/v1/tokeninfo?access_token=XXXXXX" rel="noreferrer">https://www.googleapis.com/oauth2/v1/tokeninfo?access_token=XXXXXX</a> I can see that I do have the requested scope (<a href="https://www.googleapis.com/auth/androidpublisher" rel="noreferrer">https://www.googleapis.com/auth/androidpublisher</a>) but I still get the same response everytime. 
  Did anyone else have the same problem?</p>
  
  <p>Edit: I've seen what the Explore API app does, it adds the key in the query string of a request but I don't have that value. In the console I've created a Service Account Client Id which has a client id, email address and a private key but there is no API key which apparently Explore API uses.</p>
  
  <p>Edit no. 2: I've added the service account generated email both to Google Play Developer Console and Google Wallet console but I still have no acces. I'm using nodejs and the <a href="https://www.npmjs.org/package/google-oauth-jwt" rel="noreferrer">google-oauth-jwt</a> because there is not google provided lib for nodejs. </p>
  
  <p>Here is the code I'm using to make a request: </p>
  
  <pre><code>var request = require('google-oauth-jwt').requestWithJWT();
  
  function makeReq() {
      request({
          url: 'https://www.googleapis.com/androidpublisher/v1.1/applications/{packageName}/subscriptions/{subscriptionId}/purchases/{purchaseToken}',
          jwt: {
              // use the email address of the service account, as seen in the API console
              email: 'blahblahtrutjtrutj@developer.gserviceaccount.com',
              // use the PEM file we generated from the downloaded key
              keyFile: 'purchases-test.pem',
              // specify the scopes you wish to access
              scopes: ['https://www.googleapis.com/auth/androidpublisher']
          }
      }, function (err, res, body) {
          if (err) {
              console.log(err);
          } else {
              console.log("BODY IS ------------------------------------------");
              console.log(JSON.parse(body));
          }
      });
  }
  </code></pre>