# Compliance Api returning \`Invalid Request\`

**URL:** <https://devforum.zoom.us/t/compliance-api-returning-invalid-request/6466>\
**Category:** API and Webhooks\
**Created:** [October 30, 2019, 7:40pm UTC](https://devforum.zoom.us/t/compliance-api-returning-invalid-request/6466 "2019-10-30T19:40:55Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![zoom-test](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/zoom-test/32/2531_2.png) [@zoom-test](https://devforum.zoom.us/u/zoom-test)\
**Post date:** [October 30, 2019, 7:40pm UTC](https://devforum.zoom.us/t/compliance-api-returning-invalid-request/6466/1 "2019-10-30T19:40:55Z")

</div>

**Description/Error**  
Compliance Api now rejecting our requests when they previously worked.

**Which Endpoint/s?**  
[https://api.zoom.us/oauth/data/compliance](https://api.zoom.us/oauth/data/compliance)

**How To Reproduce (If applicable)**  
Steps to reproduce the behavior:

1. Receive de-auth notification from Zoom for an app
2. Post the de-auth to compliance api
3. Get `invalid-request`

**Additional context**  
This api was really finicky before to get it to accept deauth requests and they only work the first time. If you post the same one a second time it fails so troubleshooting is extremely frustrating and tedious. Is there any way to pass back info to why the de-auth is failing? or get some help? I can supply the de-auth info in a DM if needed.

And yes I am adding the client id & secret as before when we were testing it and it worked.

Thanks!

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [October 30, 2019, 7:47pm UTC](https://devforum.zoom.us/t/compliance-api-returning-invalid-request/6466/2 "2019-10-30T19:47:03Z")

</div>

Hey @zoom-test,

Can you share the log json from the request found here: [https://marketplace.zoom.us/user/logs](https://marketplace.zoom.us/user/logs)

Feel free to DM me since there is sensitive info in the request. Or post here with the sensitive data redacted.

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![zoom-test](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/zoom-test/32/2531_2.png) [@zoom-test](https://devforum.zoom.us/u/zoom-test)\
**Post date:** [October 30, 2019, 7:52pm UTC](https://devforum.zoom.us/t/compliance-api-returning-invalid-request/6466/3 "2019-10-30T19:52:10Z")

</div>

No Data

 ![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/5/5934dd9624462c1c5a9b878ce3871b9ae0ce3f8b.png)

---

<div class="post-metadata">

**Author:** ![zoom-test](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/zoom-test/32/2531_2.png) [@zoom-test](https://devforum.zoom.us/u/zoom-test)\
**Post date:** [October 30, 2019, 7:59pm UTC](https://devforum.zoom.us/t/compliance-api-returning-invalid-request/6466/4 "2019-10-30T19:59:41Z")

</div>

Maybe I should add more context. This is for an app we developed and published to the marketplace. One of the installers of the app (external to my zoom account/organization) deauthorized the app for them and then our server got the deauthorization webhook but the call we made to the compliance API failed. Does that url ([https://marketplace.zoom.us/user/logs](https://marketplace.zoom.us/user/logs)) only show api requests made on behalf of my account for the app? Or would it show API requests made for any account outside of my own?

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [October 30, 2019, 8:15pm UTC](https://devforum.zoom.us/t/compliance-api-returning-invalid-request/6466/5 "2019-10-30T20:15:40Z")

</div>

Hey @zoom-test,

Thanks for the context.

Do you happen to have the request body that was sent? So I can debug and try to reproduce.

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![zoom-test](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/zoom-test/32/2531_2.png) [@zoom-test](https://devforum.zoom.us/u/zoom-test)\
**Post date:** [October 30, 2019, 8:21pm UTC](https://devforum.zoom.us/t/compliance-api-returning-invalid-request/6466/6 "2019-10-30T20:21:27Z")

</div>

I’ll DM you the contents.

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [October 30, 2019, 8:22pm UTC](https://devforum.zoom.us/t/compliance-api-returning-invalid-request/6466/7 "2019-10-30T20:22:02Z")

</div>

Thanks @zoom-test!

-Tommy

---

<div class="post-metadata">

**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\
**Post date:** [August 21, 2020, 7:02pm UTC](https://devforum.zoom.us/t/compliance-api-returning-invalid-request/6466/8 "2020-08-21T19:02:07Z")

</div>


