# Access and refresh token changes in V2

**URL:** <https://devforum.zoom.us/t/access-and-refresh-token-changes-in-v2/81274>\
**Category:** API and Webhooks\
**Tags:** api\
**Created:** [January 11, 2023, 1:55pm UTC](https://devforum.zoom.us/t/access-and-refresh-token-changes-in-v2/81274 "2023-01-11T13:55:03Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![mark.walsh](https://avatars.discourse-cdn.com/v4/letter/m/8edcca/32.png) [@mark.walsh](https://devforum.zoom.us/u/mark.walsh)\
**Post date:** [January 11, 2023, 1:55pm UTC](https://devforum.zoom.us/t/access-and-refresh-token-changes-in-v2/81274/1 "2023-01-11T13:55:03Z")

</div>

**API Endpoint(s) and/or Zoom API Event(s)**  
[https://marketplace.zoom.us/docs/guides/auth/oauth/](https://marketplace.zoom.us/docs/guides/auth/oauth/)

**Description**  
I’ve noticed that the OAuth implementation has now changed from:

1. Refresh tokens expiring after 15 years
2. Only the latest refresh token is valid for use to obtain an access token (you cannot use a previously issued refresh token)
3. Only the latest access token is valid for use (you cannot use a previously issued access token)

To:

1. Refresh tokens expiring after **3 months**
2. You can seemingly use any refresh token issued as long as it’s within the expiry period (3 months)in order to get an access token
3. You can seemingly use any accesstoken issued as long as it’s within the expiry period (1 hour) in to call an endpoint

So my question are as follows:

1. Am I correct?
2. Can the documentation be updated since it’s now incorrect: [https://marketplace.zoom.us/docs/guides/auth/oauth/](https://marketplace.zoom.us/docs/guides/auth/oauth/)

**Error?**  
N/A

**How To Reproduce**  
_Steps to reproduce the behavior:_  
Any access token/refresh token request to the token endpoint

---

<div class="post-metadata">

**Author:** ![freelancer.nak](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/freelancer.nak/32/40968_2.png) [@freelancer.nak](https://devforum.zoom.us/u/freelancer.nak)\
**Post date:** [January 11, 2023, 2:04pm UTC](https://devforum.zoom.us/t/access-and-refresh-token-changes-in-v2/81274/2 "2023-01-11T14:04:33Z")

</div>

@mark.walsh Hope you will be fine.

> [@mark.walsh](#):
>
> Only the latest refresh token is valid for use to obtain an access token (you cannot use a previously issued refresh token)

> [@mark.walsh](#):
>
> Only the latest access token is valid for use (you cannot use a previously issued access token)

Yes 👆

---

<div class="post-metadata">

**Author:** ![mark.walsh](https://avatars.discourse-cdn.com/v4/letter/m/8edcca/32.png) [@mark.walsh](https://devforum.zoom.us/u/mark.walsh)\
**Post date:** [January 12, 2023, 8:15am UTC](https://devforum.zoom.us/t/access-and-refresh-token-changes-in-v2/81274/3 "2023-01-12T08:15:27Z")

</div>

I will need to wait for the official confirmation from a member of staff from Zoom…

---

<div class="post-metadata">

**Author:** ![donte.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/donte.zoom/32/24412_2.png) [@donte.zoom](https://devforum.zoom.us/u/donte.zoom)\
**Post date:** [January 12, 2023, 2:21pm UTC](https://devforum.zoom.us/t/access-and-refresh-token-changes-in-v2/81274/4 "2023-01-12T14:21:40Z")

</div>

@mark.walsh ,

Thank you for posting in the Zoom Developer Forum. I am not aware of this change but perhaps I missed it. Would you mind sharing the link to the source where you see the Refresh tokens now expires in three months? I will double-check on this internally and submit a documentation update request if needed

[Refresh Tokens Expiration](https://marketplace.zoom.us/docs/guides/auth/oauth/#revoking-an-access-token)

 ![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/1/f/1f65016e22c0647840b18fa542dd11453daaa62c.png)

---

<div class="post-metadata">

**Author:** ![freelancer.nak](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/freelancer.nak/32/40968_2.png) [@freelancer.nak](https://devforum.zoom.us/u/freelancer.nak)\
**Post date:** [January 12, 2023, 2:46pm UTC](https://devforum.zoom.us/t/access-and-refresh-token-changes-in-v2/81274/5 "2023-01-12T14:46:52Z")

</div>

@mark.walsh For 👇

> [@mark.walsh](#):
>
> Refresh tokens expiring after **3 months**

It is 15 years. 👇

eg.

 ![Screenshot 2023-01-12 at 7.45.06 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/3/e/3ef3871e4ac1160f82bc1245e196197b4b84e3c2.jpeg)

---

<div class="post-metadata">

**Author:** ![pklong](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/pklong/32/33504_2.png) [@pklong](https://devforum.zoom.us/u/pklong)\
**Post date:** [September 14, 2023, 2:18pm UTC](https://devforum.zoom.us/t/access-and-refresh-token-changes-in-v2/81274/6 "2023-09-14T14:18:21Z")

</div>

@donte.zoom We’re experiencing this as well. Is there any link to where this announcement was made?

This has effectively broken many of our authorized accounts prior to the switch.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [September 17, 2024, 5:54am UTC](https://devforum.zoom.us/t/access-and-refresh-token-changes-in-v2/81274/7 "2024-09-17T05:54:59Z")

</div>

This topic was automatically closed 368 days after the last reply. New replies are no longer allowed.
