Getting invalid access token with postman

API and Webhooks
1

Description
Getting invalid access token when hitting the users url.

Error
{
“code”: 124,
“message”: “Invalid access token.”
}

Which App Type (OAuth / Chatbot / JWT / Webhook)?
JWT

Which Endpoint/s?
https://oracle.zoom.us/v2/users/me

How To Reproduce (If applicable)
Steps to reproduce the behavior:

  1. use the end point url given above
  2. Set the bearer token obtained from https://jwt.io/#libraries-io by providing api_key and secret
    under Authorization tab.
  3. If the token is getting expired, we are getting an appropriate message that the token is expired.

Screenshots (If applicable)
If applicable, add screenshots to help explain your problem.

Additional context
Is it mandatory to have an APP created in the market place even if we have the key and secret?

3

Hey @srinagachandrasekhar,

This should work fine, let me help you debug it. :slight_smile:

Are you setting the authorization header as follows:

"Authorization": "Bearer JWT_TOKEN_HERE"

Screen Shot 2020-07-23 at 3.57.47 PM
Screen Shot 2020-07-23 at 3.57.47 PM2626×1872 387 KB

Thanks,
Tommy

4

Hi Tommy,
I am setting it under Authorization tab by selecting ‘Type’ as ‘Bearer Token’.
Thanks
Chandra

5

Hey @srinagachandrasekhar,

That should also work. Can you try using the JWT Token that is generated for you in your JWT App settings on the “App Credentials” page?

Thanks,
Tommy

6

Hi Tommy,
We have generated the token using the key and secret obtained from profile settings page of my account. I am not sure if we have a JWT App in the marketplace. Is it mandatory to create one app there in order to use the API? This is one additional question I had asked when posting in forum.
If it is mandatory to create an app, does it have an organization wide scope or application specific scope? In other words, if an organization has two different applications having their own implementation using zoom API, can both the applications use the same JWT App from the marketplace? Or there must be separate apps for each implementation?
Thanks
Chandra

7

Hey @srinagachandrasekhar,

Those are legacy credentials and will not work. To use a JWT Token to call the Zoom APIs, you have to create a JWT App type here: App Marketplace

A JWT App is a single, account wide app that allows you to use the Web SDK or generate JWT Tokens for calling the Zoom API for your account.

If you wan to have multiple apps with different levels of access, you can use OAuth instead.

Thanks,
Tommy

1 Like
8

Hi Tommy,
Thanks for the clarification so far. Got one more question in this regard. Can we generate the token in the market place for any ZOOM server url or only for the server provided by ZOOM forum.
For ex. Can we generate token for https://oracle.zoom.us/v2 or only for https://api.zoom.us/v2
Thanks
Chandra

9

Hey @srinagachandrasekhar,

Do you have an On Prem Zoom instance?

Thanks,
Tommy