# Expiration of Auth Code and Refresh Token

**URL:** <https://devforum.zoom.us/t/expiration-of-auth-code-and-refresh-token/62503>\
**Category:** API and Webhooks\
**Created:** [January 11, 2022, 12:49pm UTC](https://devforum.zoom.us/t/expiration-of-auth-code-and-refresh-token/62503 "2022-01-11T12:49:51Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ksolves](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/ksolves/32/33979_2.png) [@ksolves](https://devforum.zoom.us/u/ksolves)\
**Post date:** [January 11, 2022, 12:49pm UTC](https://devforum.zoom.us/t/expiration-of-auth-code-and-refresh-token/62503/1 "2022-01-11T12:49:51Z")

</div>

## Expiration of AUTH Code and Refresh Token.

**Description**  
Whenever I try to use the authorization code twice it expires and same thing with the refresh token i.e. it shows invalid token! in case i use it to use twice.

So is there any way from which I can use either the auth code or the refresh token multiple times.

In case there is no way then is there any limit to generate the access token.

**Error**  
OAuth token expires.  
**Which App Type (OAuth / Chatbot / JWT / Webhook)?**  
OAuth.

**Which Endpoint/s?**  
Knowing the API endpoint/s can help us to identify your issue faster. Please link the ones you need help/have a question with.

**How To Reproduce (If applicable)**  
Steps to reproduce the behavior:

1. Request URL / Headers (without credentials) / Body
2. See error

**Screenshots (If applicable)**  
If applicable, add screenshots to help explain your problem.

**Additional context**  
Add any other context about the problem here.

---

<div class="post-metadata">

**Author:** ![donte.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/donte.zoom/32/24412_2.png) [@donte.zoom](https://devforum.zoom.us/u/donte.zoom)\
**Post date:** [January 19, 2022, 10:41pm UTC](https://devforum.zoom.us/t/expiration-of-auth-code-and-refresh-token/62503/2 "2022-01-19T22:41:40Z")

</div>

@ksolves,  
Welcome to the Developer Forum. You’re right, this is the expected flow. The auth code and refresh token can only be used once to get an access token. When implementing OAuth, you won’t need to store the authorization code; rather, you should store the current access tokens and the refresh tokens for the user. When the access token expires, use the current refresh token to request a new access token.

Best,  
Donte

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [February 19, 2022, 8:42am UTC](https://devforum.zoom.us/t/expiration-of-auth-code-and-refresh-token/62503/3 "2022-02-19T08:42:36Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.