About Client ID/Secret for API using OAuth: Error message "Authentication Unsuccessful: Request failed with status code 400"

API and Webhooks Authentication
1

Format Your New Topic as Follows:

ENDPOINT: ‘https://zoom.us/oauth/token’

Description
I’m creating an in-house OAuth app with Node.js.
An error is returned even if the Client ID and Client Secret are set as follows when obtaining a Token.
(Since the company wants to create with OAuth, it cannot be created with JWT etc.)
Other languages such as Python will give the same error.

It may be difficult to understand, but thank you for your reply.

headers: {
    Authorization: `Basic ${Buffer.from(
     `${CLIENT_ID}:${CLIENT_SECRET}`
     ).toString("base64")}`,
     'Content-Type': 'application/x-www-form-urlencoded'
},

Error?
{“message”:“Authentication Unsuccessful: Request failed with status code 400”}

2

Hi @y_akagi ,

You may have included this in your request and not shared here, but I do not see a request body with the appropriate info being sent for the access token:

Screenshot 2023-03-13 at 11.55.04 AM
Screenshot 2023-03-13 at 11.55.04 AM1506×642 50.7 KB

See our Postman workspace for everything that’s needed. You can also fork the space and generate the token using the requests we’ve built.

Please update me :slight_smile:

1 Like
4

Hi @gianni.zoom

Thank you for your answer

It was built by someone in-house, but I understand that the parameters are insufficient for use with OAuth.

Could you please tell me where and how to fix the following?

const axios = require("axios");
const qs = require("query-string");
const keyv = require("./keyv")
const config = require("../config");
const urlParams = new URLSearchParams(window.location.search)
const CODE = urlParams.get("code")

const getToken = async () => {
  try {
    const { ACCOUNT_ID, CLIENT_ID, CLIENT_SECRET, ENDPOINT } = config;
    const request = await axios.post(
      ENDPOINT,
      qs.stringify({
        grant_type: "authorization_code",
        // account_id: ACCOUNT_ID,
        code: CODE,
        redirect_uri: `https://resonant-triode-379502.an.r.appspot.com/`, //https://zoom.us/oauth/authorize?response_type=code&client_id=UGn0YY2iQynB9q_VSfn4Q&redirect_uri=https%3A%2F%2Fresonant-triode-379502.an.r.appspot.com
      }),
      {
        headers: {
          'Authorization': `Basic ${Buffer.from(
            `${CLIENT_ID}:${CLIENT_SECRET}`
          ).toString("base64")}`,
          'Content-Type': 'application/x-www-form-urlencoded',
        },
      }
    );
    const { access_token, expires_in } = await request.data;
    return { access_token, expires_in, error: null };
  } catch (error) {
    return { access_token: null, expires_in: null, error };
  }
};

const setToken = async ({ access_token, expires_in }) => {
  await keyv.set("access_token", access_token, expires_in);
};

module.exports = { getToken, setToken };

I’m deploying and using/testing on GCP, but after making this change I get a 500 error.

Thank you

5

Hi @y_akagi ,

Here’s a code snippet for you: Postman

In the example, the request body key value pairs are in a var = data, which is then invoked on line 16 after headers.

Does that help?

6

thank you.
This issue has been resolved.
Thank you very much.

1 Like
7

Great to hear! Take care.