# Invalid authorization code

**URL:** <https://devforum.zoom.us/t/invalid-authorization-code/1823>\
**Category:** API and Webhooks\
**Created:** [October 14, 2018, 3:39pm UTC](https://devforum.zoom.us/t/invalid-authorization-code/1823 "2018-10-14T15:39:06Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Evgeny\_Bogolubov](https://avatars.discourse-cdn.com/v4/letter/e/839c29/32.png) [@Evgeny\_Bogolubov](https://devforum.zoom.us/u/Evgeny_Bogolubov)\
**Post date:** [October 14, 2018, 3:39pm UTC](https://devforum.zoom.us/t/invalid-authorization-code/1823/1 "2018-10-14T15:39:06Z")

</div>

I’m using zoom’s marketplace App for integrate zoom through the REST-API

I followed the authentication process and get redirected to my site with  
the authorization code:&nbsp; (

```
https://myapp.com/oauth/?code=eYanu1uG5TucLenI

```

)

as described [here](https://marketplace.zoom.us/docs/guides/authorization/oauth-with-zoom/authentication-example).

But the following request for access\_token is not working, I get this response:

{  
“reason”: “Invalid authorization code t0rodWR1Le\_wwqo1VVWSrOOlPFPPFl6hA”,  
“error”: “invalid\_request”  
}

It did work last week and I have changed nothing, now its not working neither in Postman nor on my project.&nbsp;  
&nbsp;  
Please tell me if there is a solution for it, or do I make anything wrong, I have checked&nbsp;that I did everything according to the docs, and placed the right redirect uri.

 ![](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/1X/2653d96b2a74fe8fc42482007200bd5e1ff460b2.png)  
Thanks.

---

<div class="post-metadata">

**Author:** ![michael\_p.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael_p.zoom/32/18105_2.png) [@michael\_p.zoom](https://devforum.zoom.us/u/michael_p.zoom)\
**Post date:** [October 15, 2018, 10:05pm UTC](https://devforum.zoom.us/t/invalid-authorization-code/1823/2 "2018-10-15T22:05:23Z")

</div>

Hi Evgeny,&nbsp;

A couple things

1. Are you using your development credentials or production credentials? If you’re using your production credentials you will need to generate a publishable url for your production credentials to work.&nbsp;
2. Do you have your client ID and Secret listed as the Username and Password within Postman?

This is the url that I used to generate access token within your account -&nbsp;[https://zoom.us/oauth/token?grant\_type=authorization\_code&code=ynOBhuc0tE\_wwqo1VVWSrOOlPFPPFl6hA&redirect\_uri=https://evgdev.wixsite.com/zoom.&nbsp;](https://zoom.us/oauth/token?grant_type=authorization_code&code=ynOBhuc0tE_wwqo1VVWSrOOlPFPPFl6hA&redirect_uri=https://evgdev.wixsite.com/zoom.%C2%A0)

![](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/1X/c26b172f17482318e710d781455ef5561c8982bb.png)

&nbsp;

---

<div class="post-metadata">

**Author:** ![Evgeny\_Bogolubov](https://avatars.discourse-cdn.com/v4/letter/e/839c29/32.png) [@Evgeny\_Bogolubov](https://devforum.zoom.us/u/Evgeny_Bogolubov)\
**Post date:** [October 16, 2018, 10:09am UTC](https://devforum.zoom.us/t/invalid-authorization-code/1823/3 "2018-10-16T10:09:51Z")

</div>

Hi thank you for the help.

I have just noticed that there is a correct response on the first time and an invalid response on the same request again(same ‘code’), which maybe make sense.

It appears that wix made the request twice on first load (server side and client side), so I got the second invalid response.&nbsp;  
It was possible to make it run just on the client so everything fine now.

Thanks.  
&nbsp; &nbsp;

---

<div class="post-metadata">

**Author:** ![michael\_p.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael_p.zoom/32/18105_2.png) [@michael\_p.zoom](https://devforum.zoom.us/u/michael_p.zoom)\
**Post date:** [October 16, 2018, 1:43pm UTC](https://devforum.zoom.us/t/invalid-authorization-code/1823/4 "2018-10-16T13:43:54Z")

</div>

Hi Evgeny,&nbsp;

Glad to know that everything is working out. Please let us know if you need anything else.&nbsp;

Thanks

---

<div class="post-metadata">

**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\
**Post date:** [August 21, 2020, 5:56pm UTC](https://devforum.zoom.us/t/invalid-authorization-code/1823/5 "2020-08-21T17:56:51Z")

</div>


