# Requires any of \[read:servers\], not derived from scopes \[\]

**URL:** <https://discourse.jupyter.org/t/requires-any-of-read-servers-not-derived-from-scopes/15701>\
**Category:** JupyterHub\
**Tags:** jupyterhub, how-to\
**Created:** [September 9, 2022, 3:25am UTC](https://discourse.jupyter.org/t/requires-any-of-read-servers-not-derived-from-scopes/15701 "2022-09-09T03:25:36Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![zonglinZhang](https://yyz1.discourse-cdn.com/flex031/user_avatar/discourse.jupyter.org/zonglinzhang/32/7905_2.png) [@zonglinZhang](https://discourse.jupyter.org/u/zonglinZhang)\
**Post date:** [September 9, 2022, 3:25am UTC](https://discourse.jupyter.org/t/requires-any-of-read-servers-not-derived-from-scopes/15701/1 "2022-09-09T03:25:37Z")

</div>

Hi, team  
I added roles configuration in my jupyter\_config file,like this

```auto
c.JupyterHub.services = [{"name": "notebook",'url': 'http://{jhub ip}:{jhub port}'}]
c.JupyterHub.load_roles = [{'name': 'server','scopes': ['servers','users:activity','read:users:name','read:servers','delete:servers'],'services': ['notebook']}]

```

but when I started user server in jhub’s UI page, there’s a Warning in jhub’s logs:

```auto
[W 2022-09-09 03:22:22.360 JupyterHub base:93] Blocking Cross Origin API request. Referer: https://{host}/notebooks/hub/spawn/{userid}/mysql-mvp, Host: {host}, Host URL: http://{host}/notebooks/hub/
[W 2022-09-09 03:22:22.360 JupyterHub scopes:499] Not authorizing access to /notebooks/hub/api/users/{userid}/servers/mysql-mvp/progress. Requires any of [read:servers], not derived from scopes []
[W 2022-09-09 03:22:22.360 JupyterHub web:1787] 403 GET /notebooks/hub/api/users/{user_id}/servers/mysql-mvp/progress (10.12.188.14): Action is not authorized with current scopes; requires any of [read:servers]

```

could you please tell me why read:server scopes didn’t be loaded and how should I do?  
Thanks

---

<div class="post-metadata">

**Author:** ![minrk](https://yyz1.discourse-cdn.com/flex031/user_avatar/discourse.jupyter.org/minrk/32/13_2.png) [@minrk](https://discourse.jupyter.org/u/minrk)\
**Post date:** [September 9, 2022, 9:49am UTC](https://discourse.jupyter.org/t/requires-any-of-read-servers-not-derived-from-scopes/15701/2 "2022-09-09T09:49:25Z")

</div>

We need to work on these error messages.

```auto
Blocking Cross Origin API request. Referer: https://{host}/notebooks/hub/spawn/{userid}/mysql-mvp, Host: {host}, Host URL: http://{host}/notebooks/hub/

```

The issue is the proxied Host header is losing the `https`, as detected [here](https://github.com/jupyterhub/jupyterhub/blob/02dead8ab1ad53655bdb461d9d7f94b52f2ecbec/jupyterhub/utils.py#L743-L778).

Depending on your reverse proxy configuration (usually nginx, apache, etc.), the best way to resolve this is to ensure the [Forwarded](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Forwarded) header is set correctly by your outermost proxy layer.