WPS开发平台，请求`获取盘列表`接口报错 400000003 kso: PermissionDenied access_token verify err: invalid_scope

基本类似的代码，请求获取公司信息和应用信息都是正常的，但是请求drive相关的接口都会报错 { code: 400000003, message: kso: PermissionDenied access_token verify err: invalid_scope {"desc":"The requested scope is invalid, unknown, or malformed. The request scopes 'kso.drive.readwrite' has not been granted or is not allowed to be requested."}, cause: , desc: The requested scope is invalid, unknown, or malformed. The request scopes 'kso.drive.readwrite' has not been granted or is not allowed to be requested., tip:
}

测试代码如下：

const axios = require("axios");
const crypto = require("crypto");

const BASE_URL = "https://openapi.wps.cn";
const APP_ID = ""; // 请替换为实际的 APPID
const APP_SECRET_KEY = ""; // 请替换为实际的 APPKEY

/**
 * 生成 RFC1123 格式的时间字符串
 * @returns {string} RFC1123 格式的日期字符串
 */
function getRFC1123Date() {
  return new Date().toUTCString();
}

/**
 * 获取 Access Token
 * @returns {Promise} 返回 access_token
 */
async function getAccessToken() {
  const url = `${BASE_URL}/oauth2/token`;
  const headers = { "Content-Type": "application/x-www-form-urlencoded" };
  const body = new URLSearchParams({
    grant_type: "client_credentials",
    client_id: APP_ID,
    client_secret: APP_SECRET_KEY,
  }).toString();

  try {
    const response = await axios.post(url, body, { headers });
    return response.data.access_token;
  } catch (error) {
    console.error(
      "Error fetching access token:",
      error.response ? error.response.data : error.message
    );
    throw error;
  }
}

/**
 * 生成 KSO-1 签名
 * @param {string} method 请求方法 (GET, POST, etc.)
 * @param {string} requestUri 请求 URI (包含 query 参数)
 * @param {string} contentType 请求的 Content-Type
 * @param {string} ksoDate 请求的 X-Kso-Date (RFC1123 格式时间)
 * @param {string} requestBody 请求体字符串 (如果没有,传空字符串 "")
 * @returns {string} 计算后的签名字符串
 */
function generateSignature(
  method,
  requestUri,
  contentType,
  ksoDate,
  requestBody
) {
  const requestBodyHash = requestBody
    ? crypto.createHash("sha256").update(requestBody, "utf8").digest("hex")
    : "";
  const stringToSign = `KSO-1${method}${requestUri}${contentType}${ksoDate}${requestBodyHash}`;

  return crypto
    .createHmac("sha256", APP_SECRET_KEY)
    .update(stringToSign, "utf8")
    .digest("hex");
}

/**
 * 获取本企业信息
 * @param {string} accessToken 授权 token
 * @returns {Promise