# Getting Invalid CORS request

**URL:** <https://devforum.zoom.us/t/getting-invalid-cors-request/30493>\
**Category:** API and Webhooks\
**Created:** [September 16, 2020, 9:56pm UTC](https://devforum.zoom.us/t/getting-invalid-cors-request/30493 "2020-09-16T21:56:34Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![debjyoti.biswas.che1](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/debjyoti.biswas.che1/32/15444_2.png) [@debjyoti.biswas.che1](https://devforum.zoom.us/u/debjyoti.biswas.che1)\
**Post date:** [September 16, 2020, 9:56pm UTC](https://devforum.zoom.us/t/getting-invalid-cors-request/30493/1 "2020-09-16T21:56:34Z")

</div>

**Description**  
I am trying to create a meeting from Postman on my local machine.

The following is the JSON I am using

```auto
{
  "topic": "Test Meeting",
  "type": 2,
  "start_time": "2019-09-20T16:54:14Z",
  "duration": 60,
  "schedule_for": "email",
  "timezone": "America/Los_Angeles",
  "password": "jvfbv32@H",
  "agenda": "Some agenda",
  "recurrence": {
    "type": 1,
    "repeat_interval": 2,
    "weekly_days": "1",
    "monthly_day": 1,
    "monthly_week": 1,
    "monthly_week_day": 1,
    "end_times": 2
  },
  "settings": {
    "host_video": true,
    "participant_video": true,
    "cn_meeting": false,
    "in_meeting": true,
    "join_before_host": true,
    "mute_upon_entry": true,
    "watermark": true,
    "use_pmi": false,
    "approval_type": 0,
    "registration_type": 1,
    "audio": "both",
    "auto_recording": "none",
    "enforce_login": false,
    "enforce_login_domains": "string",
    "alternative_hosts": "string",
    "global_dial_in_countries": [
      "string"
    ],
    "registrants_email_notification": false
  }
}

```

**Error**  
`STATUS 403: Invalid CORS request`

**Which App Type (OAuth / Chatbot / JWT / Webhook)?**  
I am using JWT as Bearer Token

**Which Endpoint/s?**  
[https://api.zoom.us/v2/users/](https://api.zoom.us/v2/users/){email\_as\_user id}/meetings/

**How To Reproduce (If applicable)**  
Steps to reproduce the behavior:

1. Post the JSON to said endpoint
2. Use JWT for Auth

I am suspecting that I can’t create meetings with JWT. is it so?

---

<div class="post-metadata">

**Author:** ![debjyoti.biswas.che1](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/debjyoti.biswas.che1/32/15444_2.png) [@debjyoti.biswas.che1](https://devforum.zoom.us/u/debjyoti.biswas.che1)\
**Post date:** [September 16, 2020, 10:03pm UTC](https://devforum.zoom.us/t/getting-invalid-cors-request/30493/2 "2020-09-16T22:03:22Z")

</div>

If I need to use OAuth for this, where do I find clientid?

---

<div class="post-metadata">

**Author:** ![will.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/will.zoom/32/14417_2.png) [@will.zoom](https://devforum.zoom.us/u/will.zoom)\
**Post date:** [September 17, 2020, 9:19pm UTC](https://devforum.zoom.us/t/getting-invalid-cors-request/30493/3 "2020-09-17T21:19:22Z")

</div>

Hi @debjyoti.biswas.che1,

You can test with either JWT or OAuth in Postman. I have a feeling this is related more to your environment. I’d recommend checking out this stack overflow post (it’s a little older, but still links to the Relevant Postman docs):

> <https://stackoverflow.com/questions/38778083/postman-resolving-invalid-cors-request-for-a-post-request>

In regards to OAuth, if you want to test this in Postman, you’ll need to first create an OAuth app in the marketplace and then you can access the Client ID in the credentials section:

> **[Zoom Developer - Technical Documentation and Reference](https://marketplace.zoom.us/docs/guides/getting-started/app-types/create-oauth-app)**
>
> Stoplight Hubs are the easiest way to generate API documentation, technical guides, tutorials, and more! Powered by Stoplight.io

I recommend testing with a User-Level OAuth app, if you do so.

I hope this helps!  
-Will

---

<div class="post-metadata">

**Author:** ![debjyoti.biswas.che1](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/debjyoti.biswas.che1/32/15444_2.png) [@debjyoti.biswas.che1](https://devforum.zoom.us/u/debjyoti.biswas.che1)\
**Post date:** [September 18, 2020, 6:05am UTC](https://devforum.zoom.us/t/getting-invalid-cors-request/30493/4 "2020-09-18T06:05:17Z")

</div>

@will.zoom You were right, I was confused because Postman should never give CORS exception but it turns out I was running the Chrome Postman App.

So I did it via curl and worked like a charm.

---

<div class="post-metadata">

**Author:** ![will.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/will.zoom/32/14417_2.png) [@will.zoom](https://devforum.zoom.us/u/will.zoom)\
**Post date:** [September 18, 2020, 8:12pm UTC](https://devforum.zoom.us/t/getting-invalid-cors-request/30493/5 "2020-09-18T20:12:13Z")

</div>

Hey @debjyoti.biswas.che1,

Ah, glad to hear it! Thanks for letting me know.

Best,  
Will

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [October 19, 2020, 6:12am UTC](https://devforum.zoom.us/t/getting-invalid-cors-request/30493/6 "2020-10-19T06:12:26Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.