1) by token they mean sales token that only the android device can get infiniteGasPurchase.getToken()
and it is not the payload token or access token or refresh token.
2) products is just in my case gas
not the sku com.appspot.gas
3) scope is https://www.googleapis.com/auth/androidpublisher
And yes this made me frustrated haha :)