# Getting 403 on OAuth token api

**URL:** <https://devforum.zoom.us/t/getting-403-on-oauth-token-api/8801>\
**Category:** API and Webhooks\
**Created:** [March 17, 2020, 11:01am UTC](https://devforum.zoom.us/t/getting-403-on-oauth-token-api/8801 "2020-03-17T11:01:36Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![haider](https://avatars.discourse-cdn.com/v4/letter/h/48db29/32.png) [@haider](https://devforum.zoom.us/u/haider)\
**Post date:** [March 17, 2020, 11:01am UTC](https://devforum.zoom.us/t/getting-403-on-oauth-token-api/8801/1 "2020-03-17T11:01:36Z")

</div>

**Description**  
We are integrating Zoom with our own product. Once they have linked through OAuth, we need to provide our users the ability to unlink their zoom account in which case we remove their token etc. from our database but the app remains installed in their Zoom account. So now if the user tries to go through oauth again, the access token API throws a 403.

Is this the right way to provide this feature to our users?

**Error**  
Forbidden (403 Forbidden)

**Which App Type (OAuth / Chatbot / JWT / Webhook)?**  
OAuth

**Which Endpoint/s?**  
[https://zoom.us/oauth/token](https://zoom.us/oauth/token)

**How To Reproduce (If applicable)**  
Steps to reproduce the behavior:

1. Create OAuth app
2. Go through the OAuth process to get access token for a user
3. Repeat 2

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [March 17, 2020, 7:21pm UTC](https://devforum.zoom.us/t/getting-403-on-oauth-token-api/8801/2 "2020-03-17T19:21:41Z")

</div>

Hey @haider, thanks for posting and using Zoom!

Please share your full request url and details along with the full error message.

If you are trying to remove their token, you can use the [revoke token endpoint](https://marketplace.zoom.us/docs/guides/authorization/oauth/oauth-with-zoom#revoking).

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![tranvuong1803](https://avatars.discourse-cdn.com/v4/letter/t/0ea827/32.png) [@tranvuong1803](https://devforum.zoom.us/u/tranvuong1803)\
**Post date:** [March 22, 2020, 7:05pm UTC](https://devforum.zoom.us/t/getting-403-on-oauth-token-api/8801/3 "2020-03-22T19:05:21Z")

</div>

[https://zoom.us/oauth/token?grant\_type=authorization\_code&code=6VzfR5yS8m\_H7AYDkARTqaVcKnotkSONA&redirect\_uri=https://localhost:44399/](https://zoom.us/oauth/token?grant_type=authorization_code&code=6VzfR5yS8m_H7AYDkARTqaVcKnotkSONA&redirect_uri=https://localhost:44399/)  
var plainTextBytes = System.Text.Encoding.UTF8.GetBytes(client\_id + “:” + client\_secret);  
Client.DefaultRequestHeaders.Add(“Authorization”, "Basic " + Convert.ToBase64String(plainTextBytes));

i got the same issue? could you help me?  
@tommy could you help me?

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [March 23, 2020, 9:03pm UTC](https://devforum.zoom.us/t/getting-403-on-oauth-token-api/8801/4 "2020-03-23T21:03:30Z")

</div>

Hey @tranvuong1803, thanks for posting and using Zoom!

Can you please share a screenshot of the error?

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![Bizcreate](https://avatars.discourse-cdn.com/v4/letter/b/7feea3/32.png) [@Bizcreate](https://devforum.zoom.us/u/Bizcreate)\
**Post date:** [April 13, 2020, 3:34am UTC](https://devforum.zoom.us/t/getting-403-on-oauth-token-api/8801/5 "2020-04-13T03:34:48Z")

</div>

I have the same issues,  
could you help me @tommy ?

In my case, it is only showing white blank page.  
And in my program log it shown:  
Server returned HTTP response code: 403 for URL: [https://zoom.us/oauth/token](https://zoom.us/oauth/token)

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [April 13, 2020, 10:22pm UTC](https://devforum.zoom.us/t/getting-403-on-oauth-token-api/8801/6 "2020-04-13T22:22:00Z")

</div>

Hey @Bizcreate,

Have you followed our step by step OAuth guide: [https://marketplace.zoom.us/docs/guides/auth/oauth](https://marketplace.zoom.us/docs/guides/auth/oauth) ?

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![Bizcreate](https://avatars.discourse-cdn.com/v4/letter/b/7feea3/32.png) [@Bizcreate](https://devforum.zoom.us/u/Bizcreate)\
**Post date:** [April 14, 2020, 3:12am UTC](https://devforum.zoom.us/t/getting-403-on-oauth-token-api/8801/7 "2020-04-14T03:12:46Z")

</div>

Sorry for the late reply @tommy

Yes we follow that pages, but it is always return with error code 403.

Thanks

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [April 14, 2020, 6:12pm UTC](https://devforum.zoom.us/t/getting-403-on-oauth-token-api/8801/8 "2020-04-14T18:12:36Z")

</div>

Hey @Bizcreate,

Which step is throwing 403?

Please provide your full request url and headers and screenshots in a private message so I can debug.

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![Bizcreate](https://avatars.discourse-cdn.com/v4/letter/b/7feea3/32.png) [@Bizcreate](https://devforum.zoom.us/u/Bizcreate)\
**Post date:** [April 15, 2020, 12:51am UTC](https://devforum.zoom.us/t/getting-403-on-oauth-token-api/8801/9 "2020-04-15T00:51:13Z")

</div>

Thanks @tommy.

> Which step is throwing 403?  
> The step : Request Access Token

I will private message you rightaway

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [April 15, 2020, 5:49pm UTC](https://devforum.zoom.us/t/getting-403-on-oauth-token-api/8801/10 "2020-04-15T17:49:17Z")

</div>

Thanks @Bizcreate,

I will take a look.

-Tommy

---

<div class="post-metadata">

**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\
**Post date:** [August 21, 2020, 8:15pm UTC](https://devforum.zoom.us/t/getting-403-on-oauth-token-api/8801/11 "2020-08-21T20:15:51Z")

</div>


