# Invalid jwt access token

**URL:** <https://devforum.zoom.us/t/invalid-jwt-access-token/84132>\
**Category:** API and Webhooks\
**Created:** [March 3, 2023, 5:55pm UTC](https://devforum.zoom.us/t/invalid-jwt-access-token/84132 "2023-03-03T17:55:31Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Magesh\_Selvaraj](https://avatars.discourse-cdn.com/v4/letter/m/6a8cbe/32.png) [@Magesh\_Selvaraj](https://devforum.zoom.us/u/Magesh_Selvaraj)\
**Post date:** [March 3, 2023, 5:55pm UTC](https://devforum.zoom.us/t/invalid-jwt-access-token/84132/1 "2023-03-03T17:55:31Z")

</div>

hi,

Our api doesn’t seem to work and give the below error. We use the same api key and secret in my apps. It worked couple of days back when I checked. I use jwt access token.

1 \* Client out-bound request  
1 \> GET [https://api.zoom.us/v2/users?access\_token=[REDACTED]&status=active&page\_size=300&page\_number=17](https://api.zoom.us/v2/users?access_token=%5BREDACTED%5D&status=active&page_size=300&page_number=17)  
1 \> Content-Type: application/x-www-form-urlencoded  
1 \> Accept: application/json  
1 \* Client in-bound response  
1 \< 401  
1 \< expires: Thu, 01 Jan 1970 00:00:00 GMT  
1 \< CF-RAY: 7a1c58961941ceb1-SJC  
1 \< Server: cloudflare  
1 \< Connection: keep-alive  
1 \< pragma: no-cache  
1 \< Date: Thu, 02 Mar 2023 20:21:26 GMT  
1 \< set-cookie: \_\_cf\_bm=FdCpWvMdSZWXsD9ClJw4O.kENxRodZ16q7ZeQjnZzaU-1677788486-0-AU3XV+v9P+/gCx4nXXElAzq/YrLgmwc2d8tnhgzp+yiBgouf4KU39bn07kSD06l5xgkUXJu98oLKjE1D3dcbMvE=; path=/; expires=Thu, 02-Mar-23 20:51:26 GMT; [domain=.zoom.us](http://domain=.zoom.us); HttpOnly; Secure; SameSite=None  
1 \< set-cookie: \_zm\_mtk\_guid=66e8f200270c4131979262891daa9bae; [Domain=.zoom.us](http://Domain=.zoom.us); Expires=Sat, 01-Mar-2025 20:21:26 GMT; Path=/; Secure  
1 \< set-cookie: \_zm\_chtaid=781; [Domain=.zoom.us](http://Domain=.zoom.us); Expires=Thu, 02-Mar-2023 22:21:26 GMT; Path=/; Secure; HttpOnly  
1 \< set-cookie: \_zm\_ctaid=7Yp0yTlZRKO8rhOhmJw0HA.1677788486143.884dec0df09950548a0d480082a3ba55; [Domain=.zoom.us](http://Domain=.zoom.us); Expires=Thu, 02-Mar-2023 22:21:26 GMT; Path=/; Secure; HttpOnly  
1 \< set-cookie: cred=48F0263FFDCDCFCF366BB696FF07D755; Path=/; Secure; HttpOnly  
1 \< set-cookie: zm\_htmaid=“”; [Domain=.zoom.us](http://Domain=.zoom.us); Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; Secure; HttpOnly  
1 \< set-cookie: zm\_tmaid=“”; [Domain=.zoom.us](http://Domain=.zoom.us); Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; Secure; HttpOnly  
1 \< set-cookie: zm\_haid=“”; [Domain=.zoom.us](http://Domain=.zoom.us); Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; Secure; HttpOnly  
1 \< CF-Cache-Status: DYNAMIC  
1 \< NEL: {“success\_fraction”:0.01,“report\_to”:“cf-nel”,“max\_age”:604800}  
1 \< Cache-Control: no-cache, no-store, must-revalidate, no-transform  
1 \< x-content-type-options: nosniff  
1 \< Report-To: {“endpoints”:[{“url”:“https://a.nel.cloudflare.com/report/v3?s=qTrGb7mIRLTCDXNepYOeGNbM7k9SniZMBdYPv2Mbh6NPaWSO1l61%2BL6vSQ5Q3OghGN9yMvMo7S2SlASyPjaaL4XXdYdPnsuVkHtOEggg9NbvN9De3Ffhj3%2FTB4k%2B”}],“group”:“cf-nel”,“max\_age”:604800}  
1 \< x-zm-trackingid: v=2.0;clid=aw1;rid=WEB\_d55a15825abf5081c92671139b8b6c0c  
1 \< Content-Length: 108  
1 \< x-zm-zoneid: OH1  
1 \< Content-Type: application/json;charset=UTF-8  
1 \<  
{“code”:124,“message”:“Invalid access token, this access token is not supported as query parameter string.”}

Thanks,

### Before Creating a New Topic:

_If you’re experiencing unexpected API/Zoom API Events (webhooks) behavior please search the forum with relevant keywords (e.x. error message) and follow the guidance outlined in those posts. Please also leverage the following support links:_

- Zoom Developer Changelog for Dev Product Changes: [https://marketplace.zoom.us/docs/guides/stay-up-to-date/changelog/](https://marketplace.zoom.us/docs/guides/stay-up-to-date/changelog/)
- General Troubleshooting: [Support](https://devsupport.zoom.us/hc/en-us)
- To Submit a Ticket for Unexpected API/Zoom API Events Behavior: [Official Zoom Support | Help Center](https://support.zoom.us/hc/en-us)
- For General & Integrations Related Guidance: [https://community.zoom.com/](https://community.zoom.com/)
- For Troubleshooting Webhooks: [Guide: "We Are Not Receiving Webhooks As Expected" -- Here's What to Do! - #2](https://devforum.zoom.us/t/we-are-not-receiving-webhooks-as-expected-heres-what-to-do/64846/2)

* * *

### Format Your New Topic as Follows:

**API Endpoint(s) and/or Zoom API Event(s)**  
_Link the API endpoint(s) and/orZoom API Event(s) you’re working with to help give context._

**Description**  
_Details on your question, workflow or the problem you’re trying to solve._

**Error?**  
_The full error message or issue you are running into, where applicable._

**How To Reproduce**  
_Steps to reproduce the behavior:_  
_1. Request URL / Headers **(without credentials or sensitive info like emails, uuid, etc.)** / Body_  
_2. Authentication method or app type_  
_3. Any errors_

---

<div class="post-metadata">

**Author:** ![MaxM](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/maxm/32/42303_2.png) [@MaxM](https://devforum.zoom.us/u/MaxM)\
**Post date:** [March 3, 2023, 8:10pm UTC](https://devforum.zoom.us/t/invalid-jwt-access-token/84132/2 "2023-03-03T20:10:28Z")

</div>

This is happening because we no longer support access tokens in query parameters. Instead, you’ll want to provide the access token in the authorization header.

For more information, please see our announcement [here](https://marketplace.zoom.us/docs/guides/stay-up-to-date/announcements/#send-access_token-in-authorization-header-not-as-query-parameter).

I hope that helps! 🙂

---

<div class="post-metadata">

**Author:** ![Magesh\_Selvaraj](https://avatars.discourse-cdn.com/v4/letter/m/6a8cbe/32.png) [@Magesh\_Selvaraj](https://devforum.zoom.us/u/Magesh_Selvaraj)\
**Post date:** [March 3, 2023, 10:23pm UTC](https://devforum.zoom.us/t/invalid-jwt-access-token/84132/3 "2023-03-03T22:23:18Z")

</div>

Hi Max,

Thank you so much!

Regards,  
Magesh

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [March 6, 2024, 1:59pm UTC](https://devforum.zoom.us/t/invalid-jwt-access-token/84132/4 "2024-03-06T13:59:42Z")

</div>

This topic was automatically closed 368 days after the last reply. New replies are no longer allowed.