# 403 response from OAuth token request

**URL:** <https://devforum.zoom.us/t/403-response-from-oauth-token-request/59711>\
**Category:** API and Webhooks\
**Created:** [November 3, 2021, 1:33am UTC](https://devforum.zoom.us/t/403-response-from-oauth-token-request/59711 "2021-11-03T01:33:01Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![vasia](https://avatars.discourse-cdn.com/v4/letter/v/b5e925/32.png) [@vasia](https://devforum.zoom.us/u/vasia)\
**Post date:** [November 3, 2021, 1:33am UTC](https://devforum.zoom.us/t/403-response-from-oauth-token-request/59711/1 "2021-11-03T01:33:01Z")

</div>

Hi, dear Zoom community

I am receiving 403 response when trying to get an OAuth token. I have whitelisted both server URL and redirect URL in the app.

Here is the code which is doing post request to the Zoom server

```auto
client.post()
            .uri {
                it.path("https://zoom.us/oauth/token")
                    .queryParam("grant_type", "authorization_code")
                    .queryParam("code", code)
                    .queryParam("redirect_uri", "http://***/zoom")
                    .build()
            }
            .header("Authorization", "Basic $id:$secret")
            .header("Content-Type", "application/json")
            .retrieve()
            .bodyToMono(Any::class.java)
            .block()

```

Here is the error which I get

```auto
org.springframework.web.reactive.function.client.WebClientResponseException$Forbidden: 403 Forbidden from POST https://zoom.us/oauth/token?grant_type=authorization_code&code= ***&redirect_uri=http%253A%252F%252F*** %252F%2523%252Fzoom

```

I would be grateful for any advice

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [November 3, 2021, 1:41am UTC](https://devforum.zoom.us/t/403-response-from-oauth-token-request/59711/2 "2021-11-03T01:41:49Z")

</div>

Hi @vasia,

Happy to help! Did you also whitelist the development and production url?

Gianni

---

<div class="post-metadata">

**Author:** ![vasia](https://avatars.discourse-cdn.com/v4/letter/v/b5e925/32.png) [@vasia](https://devforum.zoom.us/u/vasia)\
**Post date:** [November 3, 2021, 7:35am UTC](https://devforum.zoom.us/t/403-response-from-oauth-token-request/59711/3 "2021-11-03T07:35:54Z")

</div>

Hi @gianni.zoom,

Yes, I whitelisted the domain, all subdomains, and full URLs which can be related to this, but nothing helps, still 403

---

<div class="post-metadata">

**Author:** ![MaxM](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/maxm/32/42303_2.png) [@MaxM](https://devforum.zoom.us/u/MaxM)\
**Post date:** [November 9, 2021, 11:52pm UTC](https://devforum.zoom.us/t/403-response-from-oauth-token-request/59711/4 "2021-11-09T23:52:21Z")

</div>

Hey @vasia,

When you encounter the 403 response, are you seeing a response body as well containing an error message? If so, can you share that response body here?

Thanks,  
Max

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [December 10, 2021, 9:53am UTC](https://devforum.zoom.us/t/403-response-from-oauth-token-request/59711/5 "2021-12-10T09:53:10Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.