Invalid access token, does not contain scopes for Zoom Session Granular Scopes

API and Webhooks
23

I am having the same issue, it seems to be the endpoint hasnt been updated to accept the new scopes. With no way to use the old scopes I am stuck.

24

After some DMs I was able to identify my error, although I still don’t know what the real reason for the failure was. I guess that it had to do with differences in test accounts and actual customer accounts. Still guessing, I think that maybe test accounts were not updated in the way customer accounts were when switching from one scope type to the other and with keeping the old scope type around to assure backwards compatibility the apps created with test accounts allow for different user interaction which is no longer present in the newer customer accounts. But that’s just an absolutely uneducated guess.

In my case when creating the access token I messed up the parameters. Instead of making the call with “grant_type:account_credentials” and “account_ID:XYZ” I made the call only with “grant_type:client_credentials” in the body instead of the params.
Also note that the account_id can be found in the S2S App right were the client_id and client_secret are.

Changing this minute detail created a different type of access_token which, at first glance, looked absolutely indistinguishable from the token I created with the “wrong” call. Even the response body was exactly the same and it also listed all the scopes that I selected when creating the app.

Another thing which lead to my confusion was the error message in the response body when calling the App with the wrong access_token as it displayed non existing scopes. However those scopes don’t need to be selected, as they can’t be during the creation of the app.

Sticking EXACTLY to the example calls presented in the zoom postman collection did the trick for me, after I got pointed to my error with the grant_type and the missing account_id.

1 Like
25

This worked for me! Thankyou. I was using the client_credentials grant type as thats what I always use for oauth token calls.

26

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.