Auth0 Lock React - 范围不足

Question

我尝试更新当前用户电子邮件，但Auth0 API响应返回此错误的403错误：

{
   "statusCode":403,
   "error":"Forbidden",
   "message":"You cannot update the following fields: email",
   "errorCode":"insufficient_scope"
}

但是当我实例化锁时我通过了范围。

this.lock = new Auth0Lock(clientId, domain, {
      auth: {
        redirectUrl: 'http://localhost:3000/login',
        responseType: 'token',
        params: {
          scope: 'openid email user_metadata app_metadata picture update:users'
        }
      },

我发送PATCH的脚本：

updateProfile(userId, data){
    const headers = {
      'Accept': 'application/json',
      'Content-Type': 'application/json',
      'Authorization': 'Bearer ' + this.getToken() //setting authorization header
    }
    // making the PATCH http request to auth0 api
    return fetch(`https://${this.domain}/api/v2/users/${userId}`, {
      method: 'PATCH',
      headers: headers,
      body: JSON.stringify(data)
    })
    .then(response => response.json())
    .then(newProfile => {
      this.setProfile(newProfile)
    }) //updating current profile
  }

有什么想法吗？