# Invalid access token on GET https://api.zoom.us/v2/users/me/token?type=zak

**URL:** <https://devforum.zoom.us/t/invalid-access-token-on-get-https-api-zoom-us-v2-users-me-token-type-zak/81389>\
**Category:** Users and Groups\
**Created:** [January 13, 2023, 10:50am UTC](https://devforum.zoom.us/t/invalid-access-token-on-get-https-api-zoom-us-v2-users-me-token-type-zak/81389 "2023-01-13T10:50:47Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![alessandro.feliziani](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/alessandro.feliziani/32/44487_2.png) [@alessandro.feliziani](https://devforum.zoom.us/u/alessandro.feliziani)\
**Post date:** [January 13, 2023, 10:50am UTC](https://devforum.zoom.us/t/invalid-access-token-on-get-https-api-zoom-us-v2-users-me-token-type-zak/81389/1 "2023-01-13T10:50:47Z")

</div>

Hello,

I have an OAuth+User Managed app on the zoom marketplace that I would like to publish. Beside that, I also have an SDK app because I need to use webSDK integration.

USE CASE:  
My requirement is to be able to start zoom meetings on behalf of other users (not belonging to my development account). For this reason, I understand that I need to use **zak token** , as well as to **publish my app** to the zoom marketplace.

QUESTION 1: it is enough to publish OAuth app or I also need to publish the SDK app?

MY SOLUTION:  
This is what I do:  
my users connect their zoom account to the app via OAuth2 in order to obtain an access token. I store users’ access\_token on my db. When a user wants to start a zoom meeting on my app, I invoke first the API to get the zak token, and then the API to create a meeting. I also generate an sdk signature with role 1, and then I use the webSDK’s component view to start the meeting on my app.

PROBLEM  
The problem is: sometimes I get this error when I try to get a zak token:

GET [https://api.zoom.us/v2/users/me/token?type=zak](https://api.zoom.us/v2/users/me/token?type=zak)  
{  
“code”: 4700,  
“message”: “Invalid access token, does not contain scopes: [user:write:admin, user:read:admin, user:read, user:write, user\_profile].”  
}

I have added the user\_zak:read scope to both my applications (OAuth and SDK).

It seems that I get this error when I invoke the API with the access\_token of the user to whom the app is connected. For example, on my local environment, I am not able to get the zak token for my development user, while for other users connected my my development account it works.

On dev environment, where the app is currently being reviewed and connected to the reviewer’s zoom account, the reviewer is getting the same error.

Can you please help?

---

<div class="post-metadata">

**Author:** ![freelancer.nak](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/freelancer.nak/32/40968_2.png) [@freelancer.nak](https://devforum.zoom.us/u/freelancer.nak)\
**Post date:** [January 13, 2023, 10:57am UTC](https://devforum.zoom.us/t/invalid-access-token-on-get-https-api-zoom-us-v2-users-me-token-type-zak/81389/2 "2023-01-13T10:57:41Z")

</div>

@alessandro.feliziani Hope you will be fine.

Here is the session → [Get user Zoom Access Key Token - ZAK - (Zoom REST API)](https://youtu.be/C2Bbn0PMJNw)

---

<div class="post-metadata">

**Author:** ![alessandro.feliziani](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/alessandro.feliziani/32/44487_2.png) [@alessandro.feliziani](https://devforum.zoom.us/u/alessandro.feliziani)\
**Post date:** [April 2, 2023, 6:38am UTC](https://devforum.zoom.us/t/invalid-access-token-on-get-https-api-zoom-us-v2-users-me-token-type-zak/81389/3 "2023-04-02T06:38:42Z")

</div>

Invoking this endpoint fixes the issue:  
[https://api.zoom.us/v2/users/me/zak](https://api.zoom.us/v2/users/me/zak)

I also notic that zak is a one-time token. I was storing it on db in order to re-use it. This is wrong, need to generate a fresh one each time.

---

<div class="post-metadata">

**Author:** ![novotechzone](https://avatars.discourse-cdn.com/v4/letter/n/ecc23a/32.png) [@novotechzone](https://devforum.zoom.us/u/novotechzone)\
**Post date:** [January 7, 2024, 4:59pm UTC](https://devforum.zoom.us/t/invalid-access-token-on-get-https-api-zoom-us-v2-users-me-token-type-zak/81389/4 "2024-01-07T16:59:04Z")

</div>

Hi I am developing app using Android zoom meeting SDK using which SDK is initialised by JWT token and ZAK token is used to join meeting as Host. I want to know lifetime of ZAK token for Free user and paid user. As my meetings can run for 10 hrs. And life of ZAK token is just 2 hrs.  
Please reply

---

<div class="post-metadata">

**Author:** ![freelancer.nak](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/freelancer.nak/32/40968_2.png) [@freelancer.nak](https://devforum.zoom.us/u/freelancer.nak)\
**Post date:** [January 8, 2024, 8:56am UTC](https://devforum.zoom.us/t/invalid-access-token-on-get-https-api-zoom-us-v2-users-me-token-type-zak/81389/5 "2024-01-08T08:56:29Z")

</div>

You have ttl (time-to-live) for custom expiry time with zak.

---

<div class="post-metadata">

**Author:** ![novotechzone](https://avatars.discourse-cdn.com/v4/letter/n/ecc23a/32.png) [@novotechzone](https://devforum.zoom.us/u/novotechzone)\
**Post date:** [January 19, 2024, 4:13pm UTC](https://devforum.zoom.us/t/invalid-access-token-on-get-https-api-zoom-us-v2-users-me-token-type-zak/81389/6 "2024-01-19T16:13:17Z")

</div>

Hi thanks for your reply. Can you please provide exact code where TTL is to be passed to generate the ZAK. I am using PHP CURL to generate the ZAK which is valid for 2 hrs. only. I have purchased your paid plan Rs. 1300/- per month where meeting can last up to 30hrs. with 100 participants. The Android app that we developed using zoom SDK have meeting for 8 hrs. Long but as Zak token life is of 2 hrs so it ends the meeting. Please let us know how we can have ZAK token of long life.  
Also the app that we developed does not initialise zoomsdk on Android version 14  
Please provide solution.  
Thanks & Regards  
Karmvir

---

<div class="post-metadata">

**Author:** ![freelancer.nak](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/freelancer.nak/32/40968_2.png) [@freelancer.nak](https://devforum.zoom.us/u/freelancer.nak)\
**Post date:** [January 19, 2024, 4:28pm UTC](https://devforum.zoom.us/t/invalid-access-token-on-get-https-api-zoom-us-v2-users-me-token-type-zak/81389/7 "2024-01-19T16:28:06Z")

</div>

Here is the endpoint → ` /users/{userId}/token`

> **[Zoom Meeting API](https://developers.zoom.us/docs/api/rest/reference/zoom-api/methods/#operation/userToken)**
>
> API Reference for /docs/api/rest/reference/zoom-api/methods

---

<div class="post-metadata">

**Author:** ![novotechzone](https://avatars.discourse-cdn.com/v4/letter/n/ecc23a/32.png) [@novotechzone](https://devforum.zoom.us/u/novotechzone)\
**Post date:** [January 19, 2024, 5:08pm UTC](https://devforum.zoom.us/t/invalid-access-token-on-get-https-api-zoom-us-v2-users-me-token-type-zak/81389/8 "2024-01-19T17:08:53Z")

</div>

The above solution does not solve my problem. Please provide solution for my second problem of Error in initizing the zoomsdk on Android version 14.  
What is the solution so that zoomsdk initialise on Android 14 version also. It is working fine for Android version 13  
Thanks
