# Invalid access token - Server to Server App

**URL:** <https://devforum.zoom.us/t/invalid-access-token-server-to-server-app/83275>\
**Category:** Authentication\
**Created:** [February 16, 2023, 4:56pm UTC](https://devforum.zoom.us/t/invalid-access-token-server-to-server-app/83275 "2023-02-16T16:56:43Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![didaris](https://avatars.discourse-cdn.com/v4/letter/d/73ab20/32.png) [@didaris](https://devforum.zoom.us/u/didaris)\
**Post date:** [February 16, 2023, 4:56pm UTC](https://devforum.zoom.us/t/invalid-access-token-server-to-server-app/83275/1 "2023-02-16T16:56:43Z")

</div>

### Format Your New Topic as Follows:

**API Endpoint(s) and/or Zoom API Event(s)**  
[https://api.zoom.us/v2/meetings/MEETING\_ID](https://api.zoom.us/v2/meetings/MEETING_ID)

**Description**  
I recently changed my application from JWT to using Server to Server OAuth. I made the change 25.01.2023 in the morning. Everything seemed to be working on that day. However, I started getting “invalid access token” one after the other on the following day. All of our courses start at 6pm and we were flooded by calls from the trainers about them not being able to start meeting.

1. We do not use refresh tokens. Once a token is issued, we save it internally for half an hour and then, request a new token.
2. Even after requesting (and getting a new token), we got “Invalid Access Token” within next 5 minutes, so there is no question of whether we were using tokens after they expired.

**Error?**  
{“code”:124,“message”:“Invalid access token.”}

**How To Reproduce**  
_Steps to reproduce the behavior:_  
\*1. Request URL

- [https://api.zoom.us/v2/meetings/84247729932](https://api.zoom.us/v2/meetings/84247729932)
- [https://api.zoom.us/v2/meetings/86782277852/recordings?include\_fields=download\_access\_token&ttl=5](https://api.zoom.us/v2/meetings/86782277852/recordings?include_fields=download_access_token&ttl=5)

_2. Authentication method or app type_  
Server to Server OAuth

_3. Any errors_  
{“code”:124,“message”:“Invalid access token.”}