# Error 401 Invalid client\_id or client\_secret

**URL:** <https://devforum.zoom.us/t/error-401-invalid-client-id-or-client-secret/60558>\
**Category:** API and Webhooks\
**Created:** [November 22, 2021, 4:26pm UTC](https://devforum.zoom.us/t/error-401-invalid-client-id-or-client-secret/60558 "2021-11-22T16:26:42Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![thomashummer](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/thomashummer/32/32759_2.png) [@thomashummer](https://devforum.zoom.us/u/thomashummer)\
**Post date:** [November 22, 2021, 4:26pm UTC](https://devforum.zoom.us/t/error-401-invalid-client-id-or-client-secret/60558/1 "2021-11-22T16:26:42Z")

</div>

**Description**  
Trying to request access token for oauth 2.0 by POST to /oauth/token ends up here:  
{  
“reason”: “Invalid client\_id or client\_secret”,  
“error”: “invalid\_client”  
}  
I’ve checked client\_id and client\_secret again and again…  
Posting with axios from a node js app. Tested it with Postman - same result

request-parameters: “grant\_type=authorization\_code&code=xxxxxxx&redirect\_uri=https%3A%2F%[2Fad92-86-56-238-188.ngrok.io](http://2Fad92-86-56-238-188.ngrok.io)%2Fzoom%2Fsetoauth%2Fgettokenfromzoom”,

The xxxxxx in the Authorization of headers is base64 encoded “client\_id:client\_secret” provided in the generated oauth2-app. redirect\_uri is whitelisted

**Which App Type (OAuth / Chatbot / JWT / Webhook)?**  
OAuth

**Which Endpoint/s?**  
[https://zoom.us/oauth/token](https://zoom.us/oauth/token)

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [November 22, 2021, 4:44pm UTC](https://devforum.zoom.us/t/error-401-invalid-client-id-or-client-secret/60558/2 "2021-11-22T16:44:28Z")

</div>

Hi @thomashummer ,

Happy to help. Can you please share the url from the page that’s giving you the invalid client\_id or client\_secret response?

I also noticed you’re using ngrok to authorize. Are you updating the white list link when you reboot your server/the link changes?

Thank you,  
Gianni

---

<div class="post-metadata">

**Author:** ![thomashummer](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/thomashummer/32/32759_2.png) [@thomashummer](https://devforum.zoom.us/u/thomashummer)\
**Post date:** [November 22, 2021, 4:49pm UTC](https://devforum.zoom.us/t/error-401-invalid-client-id-or-client-secret/60558/3 "2021-11-22T16:49:16Z")

</div>

Hi Gianni,  
i tried it with ngrok because i had about 100 tries that didn’t work on production-server. Yes i update the whitelist.  
My development url is: [https://ad92-86-56-238-188.ngrok.io/zoom/setoauth?code=XXXXX](https://ad92-86-56-238-188.ngrok.io/zoom/setoauth?code=XXXXX)  
Production: [https://logopaedie-ooe.at/zoom/setoauth?code=XXXX](https://logopaedie-ooe.at/zoom/setoauth?code=XXXX)

Both systems running and whitelisted

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [November 22, 2021, 6:34pm UTC](https://devforum.zoom.us/t/error-401-invalid-client-id-or-client-secret/60558/4 "2021-11-22T18:34:42Z")

</div>

Hi @thomashummer ,

Thank you! And to clarify,your Content-Type in the headers is `application/x-www-form-urlencoded`?

Send the link to this inquiry to [developersupport@zoom.us](mailto:developersupport@zoom.us) and we can coordinate a time to meet so I can look at your set up on the Marketplace App Credentials page and in Postman.

Gianni

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [December 23, 2021, 4:35am UTC](https://devforum.zoom.us/t/error-401-invalid-client-id-or-client-secret/60558/5 "2021-12-23T04:35:30Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.