# Client\_id and Client\_secret not valid **URL:** \ **Category:** API and Webhooks\ **Created:** [April 13, 2020, 3:48pm UTC](https://devforum.zoom.us/t/client-id-and-client-secret-not-valid/12945 "2020-04-13T15:48:11Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![bizstim.apps](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/bizstim.apps/32/3599_2.png) [@bizstim.apps](https://devforum.zoom.us/u/bizstim.apps)\ **Post date:** [April 13, 2020, 3:48pm UTC](https://devforum.zoom.us/t/client-id-and-client-secret-not-valid/12945/1 "2020-04-13T15:48:11Z")
When I started the procedure for publishing the app I noticed I needed a data compliance page and procedure so I made those additions. Now, Zoom does not recognize my client\_id and client\_secret. I have tried using both the production and development id’s and secrets and that did not work I regenerated the publishable url and that did not work I regenerated the secret codes for both production and development and that did not work This process was working until I tried to publish the app. After that, nothing works. Any thoughts? ---
**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\ **Post date:** [April 14, 2020, 7:10am UTC](https://devforum.zoom.us/t/client-id-and-client-secret-not-valid/12945/2 "2020-04-14T07:10:39Z")
Hey @bizstim.apps, What is the name of your app? I will look into this. Thanks, Tommy ---
**Author:** ![bizstim.apps](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/bizstim.apps/32/3599_2.png) [@bizstim.apps](https://devforum.zoom.us/u/bizstim.apps)\ **Post date:** [April 15, 2020, 5:52pm UTC](https://devforum.zoom.us/t/client-id-and-client-secret-not-valid/12945/3 "2020-04-15T17:52:51Z")
The name is: Bizstim Software Solutions I tried again today with both the client\_id and client\_secret for production and developments and it returns the following error: _Invalid client\_id or client\_secret, error: invalid\_client_ I thought is may be an issue related to my config and the storing of sessions but it still failed even after refreshing the session with both client\_id and client\_secret. If you need to follow up via e-mail please do so at [mail@bizstim.com](mailto:mail@bizstim.com) Thanks for your help. ---
**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\ **Post date:** [April 16, 2020, 5:35am UTC](https://devforum.zoom.us/t/client-id-and-client-secret-not-valid/12945/4 "2020-04-16T05:35:06Z")
Hey @bizstim.apps, Can you also provide steps to reproduce the issue? What endpoint are you trying to call? Thanks, Tommy ---
**Author:** ![bizstim.apps](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/bizstim.apps/32/3599_2.png) [@bizstim.apps](https://devforum.zoom.us/u/bizstim.apps)\ **Post date:** [April 17, 2020, 1:17pm UTC](https://devforum.zoom.us/t/client-id-and-client-secret-not-valid/12945/5 "2020-04-17T13:17:14Z")
Went to your developer page for authorizing with zoom: [https://marketplace.zoom.us/docs/api-reference/zoom-api/meetings/meetings](https://marketplace.zoom.us/docs/api-reference/zoom-api/meetings/meetings) add client\_id and client\_secret and choose “me” as the {userId} Get the following error from Zoom: Invalid redirect: [https://marketplace.zoom.us/docs/oauth/callback/success](https://marketplace.zoom.us/docs/oauth/callback/success) (4,700) When I use my code I get invalid client\_id and client\_secret from the Zoom API. What more can I tell you? ---
**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\ **Post date:** [April 19, 2020, 6:01am UTC](https://devforum.zoom.us/t/client-id-and-client-secret-not-valid/12945/6 "2020-04-19T06:01:37Z")
Hey @bizstim.apps, Please add `https://zoom.us` as the redirect URL and whitelist URL and the Test Request feature on our docs will work. For calling the endpoint in your code, make sure you are following the [OAuth flow](https://marketplace.zoom.us/docs/guides/auth/oauth). Thanks, Tommy ---
**Author:** ![bizstim.apps](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/bizstim.apps/32/3599_2.png) [@bizstim.apps](https://devforum.zoom.us/u/bizstim.apps)\ **Post date:** [April 20, 2020, 8:52pm UTC](https://devforum.zoom.us/t/client-id-and-client-secret-not-valid/12945/7 "2020-04-20T20:52:54Z")
What flow do you think I am following??? Of course I am using the OAuth flow. I certainly wouldn’t make one up. The flow was working until I tried to publish the app, then I got a client\_id and client\_secret invalid message. Honestly, if you do not intend to help me solve this, just say so and I will go away. ---
**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\ **Post date:** [April 21, 2020, 9:34am UTC](https://devforum.zoom.us/t/client-id-and-client-secret-not-valid/12945/8 "2020-04-21T09:34:31Z")
Hey @bizstim.apps, Please bear with us while we support you! 🙂 > [@bizstim.apps](#): > > When I use my code I get invalid client\_id and client\_secret from the Zoom API. This error is thrown when using a [Chatbot token via the client\_credentials flow](https://marketplace.zoom.us/docs/guides/chatbots/installation-and-authentication#authentication) to call the Zoom APIs that require an [OAuth access\_token](https://marketplace.zoom.us/docs/guides/auth/oauth). Also double check your dev and prod keys have not been mixed up. Thanks, Tommy ---
**Author:** ![bizstim.apps](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/bizstim.apps/32/3599_2.png) [@bizstim.apps](https://devforum.zoom.us/u/bizstim.apps)\ **Post date:** [April 22, 2020, 4:33pm UTC](https://devforum.zoom.us/t/client-id-and-client-secret-not-valid/12945/9 "2020-04-22T16:33:21Z")
I am not using the chatbot token!!! I did not even look at the chatbot API process. I ONLY use the OAuth Flow!!! I am telling you, this process worked when I developed it 3 weeks ago, and then I went back to check the entire process after starting the submission process to the APP Marketplace and the process no longer works. This is the process I am using on a high level: 1. Go to [https://zoom.us/oauth/authorize](https://zoom.us/oauth/authorize) 2. The user logs into their account and authorizes with ZOOM 3. They are redirected by ZOOM with an access code to my auth page 4. That code is used to make a cURL call to this endpoint: [https://zoom.us/oauth/token](https://zoom.us/oauth/token) (zoom\_request\_token) 5. Here is part of the code for making the cURL call: $post\_data = [ ‘grant\_type’ =\> ‘authorization\_code’, ‘code’ =\> $code, ‘redirect\_uri’ =\> $zoom\_redirect\_uri ]; ``` $return = $this->_cURL_post($zoom_request_token, $post_data, $base64_authorization); ``` THIS IS WHERE I GET THE FOLLOWING ERROR MESSAGE FROM ZOOM: ``` **Invalid client_id or client_secret, error: invalid_client** ``` If I did get a successful response the following happens: 1. Save the access token and refresh token 2. I link the user’s Bizstim account with the return Zoom email address and their personal meeting id and other return data is saved **THE PROBLEM** ZOOM returns an invalid client\_id and client\_secret message. I am using my development client\_id and secret\_id. On a side note, I also tried the production keys but that fails with the same message. You say I am using a chatbot process but I NEVER looked at the chatbot auth flow and I have followed the documentation with the ZOOM API OAuth Flow Process. Where can I possibly go from here? ---
**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\ **Post date:** [April 23, 2020, 5:31pm UTC](https://devforum.zoom.us/t/client-id-and-client-secret-not-valid/12945/10 "2020-04-23T17:31:48Z")
Hey @bizstim.apps, Can you make sure you are sending the authorization header with the base 64 encoded key and secret properly? `"Authorization": "Basic base64encoded(key:secret)"` The issue must be in that part of the process. Feel free to send me your $base64\_authorization value in a private message so I can debug. Thanks for your patience, Tommy ---
**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\ **Post date:** [August 21, 2020, 8:54pm UTC](https://devforum.zoom.us/t/client-id-and-client-secret-not-valid/12945/11 "2020-08-21T20:54:39Z")