bug: 401 Unauthorized when using search query parameter about idp-scim-sync HOT 7 CLOSED

Error: cannot sync groups and their members: error getting groups from the identity provider: idp: error listing groups: Get "https://admin.googleapis.com/admin/directory/v1/groups?alt=json&customer=my_customer&fields=groups%28id%2Cname%2Cemail%2Cetag%29&prettyPrint=false&query=name%3DSysAdmin": oauth2: cannot fetch token: 401 Unauthorized
Response: {
  "error": "unauthorized_client",
  "error_description": "Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested."
}

$ ./idpscimcli gws groups list \
--gws-service-account-file credentials.json \
--gws-user-email [email protected] \
--gws-groups-filter 'name=SysAdmin'

INFO[0000] 1 groups found
INFO[0000] [
  {
    "email": "[email protected]",
    "etag": "xxxxxxxx",
    "id": "xxxxxxxxxxx",
    "name": "SysAdmin"
  }
]

INFO[0000] starting sync groups                          codeVersion=main
INFO[0000] getting Identity Provider data                group_filter="[name=SysAdmin]"
INFO[0002] getting state data
WARN[0002] no state file found in the state repository, creating this
WARN[0002] syncing from scim service, first time syncing
WARN[0002] reconciling the SCIM data with the Identity Provider data
INFO[0002] getting SCIM Groups
WARN[0003] aws checkHTTPResponse: body:                  status="401 Unauthorized" statusCode=401
Error: cannot sync groups and their members: error doing the first sync: error getting groups from the SCIM service: scim: error listing groups: statusCode: 401,  errCode: 401 Unauthorized, errMsg:

INFO[0000] starting sync groups                          codeVersion=main
INFO[0000] getting Identity Provider data                group_filter="[name=SysAdmin]"
WARN[0001] google: not including [email protected] to group xxxxxxxxx members due to incorrect status  (not ACTIVE)
WARN[0001] google: not including [email protected] to group xxxxxxxxx members due to incorrect status  (not ACTIVE)
WARN[0001] google: not including [email protected] to group xxxxxxxxx members due to incorrect status  (not ACTIVE)
WARN[0001] google: not including [email protected] to group xxxxxxxxx members due to incorrect status  (not ACTIVE)
WARN[0001] google: not including [email protected] to group xxxxxxxxx members due to incorrect status  (not ACTIVE)
WARN[0001] there are no users in the identity provider
INFO[0001] getting state data
WARN[0001] no state file found in the state repository, creating this
WARN[0001] syncing from scim service, first time syncing
WARN[0001] reconciling the SCIM data with the Identity Provider data
INFO[0001] getting SCIM Groups
WARN[0001] aws checkHTTPResponse: body:                  status="401 Unauthorized" statusCode=401
Error: cannot sync groups and their members: error doing the first sync: error getting groups from the SCIM service: scim: error listing groups: statusCode: 401,  errCode: 401 Unauthorized, errMsg:

WARN[0013] google: not including [email protected] to group xxxxx members due to incorrect status  (not ACTIVE)
WARN[0013] skipping member because is a group, but group members will be included  [email protected] id=xxxx
WARN[0013] google: not including [email protected] to group xxxxx members due to incorrect status SUSPENDED (not ACTIVE)

INFO[0597] getting state data
WARN[0597] no state file found in the state repository, creating this
WARN[0597] syncing from scim service, first time syncing
WARN[0597] reconciling the SCIM data with the Identity Provider data
INFO[0597] getting SCIM Groups
INFO[0597] [DEBUG] GET https://scim.eu-central-1.amazonaws.com/xxxxxxxx/scim/v2/Groups
WARN[0597] aws checkHTTPResponse: body:                  status="401 Unauthorized" statusCode=401
Error: cannot sync groups and their members: error doing the first sync: error getting groups from the SCIM service: scim: error listing groups: statusCode: 401,  errCode: 401 Unauthorized, errMsg: