Hi,

I have been developing an app that uses itch.io oauth for authentication but would like to verify that the user logged in has access either to a particular app or piece of software I have listed on itch. I have tried the /my-games rest endpoint but the api key provided by the oauth doesent have permissions for profile:games only profile:me and adding games to the scope doesent seem to resolve the problem as the endpoint always returns with a lack of permissions.

Is it possible at the current moment in time to return server side a json list of a users games/purchases or in anyway to verify if a user has purchased a specific product (even via ID) on itch and if so what endpoint/permissions needs to be provided?