# 403 Error and Cors Issues When Trying to Get Access Token

**URL:** <https://devforum.zoom.us/t/403-error-and-cors-issues-when-trying-to-get-access-token/39280>\
**Category:** API and Webhooks\
**Created:** [December 28, 2020, 7:07am UTC](https://devforum.zoom.us/t/403-error-and-cors-issues-when-trying-to-get-access-token/39280 "2020-12-28T07:07:21Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![lloydinator](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/lloydinator/32/20699_2.png) [@lloydinator](https://devforum.zoom.us/u/lloydinator)\
**Post date:** [December 28, 2020, 7:07am UTC](https://devforum.zoom.us/t/403-error-and-cors-issues-when-trying-to-get-access-token/39280/1 "2020-12-28T07:07:21Z")

</div>

**Description**  
I’ve seen this posted multiple times but I’ve yet to see an answer. I’m trying to get an access token with a Vue app but I keep getting a 403.

**Error**  
403 Forbidden. Also getting `CORS header ‘Access-Control-Allow-Origin’ missing` but I’m thinking that’s due to the 403? Not sure.

**Which App Type (OAuth / Chatbot / JWT / Webhook)?**  
OAuth

**Which Endpoint/s?**  
`https://zoom.us/oauth/token`

**How To Reproduce (If applicable)**  
I’ve followed the instructions exactly, including the Authorization Code in base64.

**Screenshots (If applicable)**  
 ![Screenshot 2020-12-28 015410](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/c/9/c900b0abd758a1adb852c2f5fea349dbbfecd2a7.jpeg)

**Additional context**  
Add any other context about the problem here.

---

<div class="post-metadata">

**Author:** ![lloydinator](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/lloydinator/32/20699_2.png) [@lloydinator](https://devforum.zoom.us/u/lloydinator)\
**Post date:** [December 28, 2020, 10:33pm UTC](https://devforum.zoom.us/t/403-error-and-cors-issues-when-trying-to-get-access-token/39280/2 "2020-12-28T22:33:22Z")

</div>

“All Zoom OAuth and API endpoints must be called from the server side of your application. If called from the client side, CORS errors will be thrown.”

Reading is fundamental smh. I TOTALLY missed this part. Welp, nevermind then.

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [December 28, 2020, 10:38pm UTC](https://devforum.zoom.us/t/403-error-and-cors-issues-when-trying-to-get-access-token/39280/3 "2020-12-28T22:38:27Z")

</div>

Hey @lloydinator,

You are correct, all APIs must be called from the server side or you will see CORs errors! 🙂

If anything else comes up, feel free to reach out!

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [January 28, 2021, 8:38am UTC](https://devforum.zoom.us/t/403-error-and-cors-issues-when-trying-to-get-access-token/39280/4 "2021-01-28T08:38:28Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
