# Invalid request: Client ID mismatch error **URL:** \ **Category:** API and Webhooks\ **Created:** [May 22, 2020, 10:12pm UTC](https://devforum.zoom.us/t/invalid-request-client-id-mismatch-error/18797 "2020-05-22T22:12:32Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![haydenr](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/haydenr/32/5899_2.png) [@haydenr](https://devforum.zoom.us/u/haydenr)\ **Post date:** [May 22, 2020, 10:12pm UTC](https://devforum.zoom.us/t/invalid-request-client-id-mismatch-error/18797/1 "2020-05-22T22:12:32Z")
**Description** I ran into error code 401, client ID mismatch when I try to follow the steps to retrieve the access\_token from an user. I have no idea what the error is about, since I’ve double checked my client\_id both in the request for user authorization and for the access token, and they seem to match. **Error** I20200522-17:39:30.567(-4)? response: { I20200522-17:39:30.567(-4)? statusCode: 401, I20200522-17:39:30.568(-4)? content: ‘{“reason”:“Invalid request : Client ID mismatch”,“error”:“invalid\_client”}’, I20200522-17:39:30.568(-4)? headers: { I20200522-17:39:30.568(-4)? date: ‘Fri, 22 May 2020 21:39:30 GMT’, I20200522-17:39:30.568(-4)? ‘content-type’: ‘application/json;charset=UTF-8’, I20200522-17:39:30.568(-4)? ‘transfer-encoding’: ‘chunked’, I20200522-17:39:30.568(-4)? connection: ‘close’, I20200522-17:39:30.568(-4)? server: ‘ZOOM’, I20200522-17:39:30.568(-4)? ‘x-zm-trackingid’: ‘WEB\_c0b6183cd26e969c68bee52564ec2f2b’, I20200522-17:39:30.568(-4)? ‘x-content-type-options’: ‘nosniff’, I20200522-17:39:30.568(-4)? ‘content-security-policy’: “default-src https://_.zoom.us [https://zoom.us](https://zoom.us) https://_.zoom.com.cn [https://zoom.com.cn](https://zoom.com.cn) [https://d17o6on0vd932d.cloudfront.net](https://d17o6on0vd932d.cloudfront.net) blob: ‘self’; script-src ‘unsafe-eval’ ‘unsafe-inline’ blob: about: [https://ajax.aspnetcdn.com/ajax/3.5/MicrosoftAjax.js](https://ajax.aspnetcdn.com/ajax/3.5/MicrosoftAjax.js) [https://appsforoffice.microsoft.com](https://appsforoffice.microsoft.com) [https://assets.zendesk.com](https://assets.zendesk.com) [https://autocomplete.demandbase.com](https://autocomplete.demandbase.com) [https://cdn-javascript.net](https://cdn-javascript.net) [https://cdn-js.net](https://cdn-js.net) [https://cdn.wootric.com](https://cdn.wootric.com) [https://cdncache-a.akamaihd.net](https://cdncache-a.akamaihd.net) [https://connect.facebook.net](https://connect.facebook.net) [https://consent.trustarc.com](https://consent.trustarc.com) [https://d.adroll.mgr.consensu.org](https://d.adroll.mgr.consensu.org) [https://d2b9h3rz4xo53c.cloudfront.net](https://d2b9h3rz4xo53c.cloudfront.net) [https://d24cgw3uvb9a9h.cloudfront.net](https://d24cgw3uvb9a9h.cloudfront.net) [https://googleads.g.doubleclick.net](https://googleads.g.doubleclick.net) [https://pi.pardot.com](https://pi.pardot.com) [https://ruanshi2.8686c.com](https://ruanshi2.8686c.com) [https://s.dcbap.com](https://s.dcbap.com) [https://s.ytimg.com](https://s.ytimg.com) [https://s3.amazonaws.com](https://s3.amazonaws.com) [https://scout-cdn.salesloft.com](https://scout-cdn.salesloft.com) [https://sealserver.trustwave.com](https://sealserver.trustwave.com) [https://secure-cdn.mplxtms.com](https://secure-cdn.mplxtms.com) [https://serve2.cheqzone.com](https://serve2.cheqzone.com) [https://snap.licdn.com](https://snap.licdn.com) [https://sp.analytics.yahoo.com](https://sp.analytics.yahoo.com) [https://static.zdassets.com](https://static.zdassets.com) [https://static2.sharepointonline.com](https://static2.sharepointonline.com) [https://tag.demandbase.com](https://tag.demandbase.com) [https://tpc.googlesyndication.com](https://tpc.googlesyndication.com) [https://tracking.g2crowd.com](https://tracking.g2crowd.com) [https://trk.techtarget.com](https://trk.techtarget.com) [https://www.comeet.co](https://www.comeet.co) [https://www.dropbox.com](https://www.dropbox.com) [https://www.google-analytics.com](https://www.google-analytics.com) [https://www.googleadservices.com](https://www.googleadservices.com) [https://www.googletagmanager.com](https://www.googletagmanager.com) [https://www.gstatic.com](https://www.gstatic.com) [https://www.youtube.com](https://www.youtube.com) [https://d17o6on0vd932d.cloudfront.net](https://d17o6on0vd932d.cloudfront.net) https://_.ada.support https://_.adroll.com https://_.google.com https://_.hotjar.com https://_.linkedin.com https://_.zoom.us https://_.zoomcloudpbx.com https://_.zoomus.cn https://_.zopim.com [https://adroll.com](https://adroll.com) [https://google.com](https://google.com) [https://linkedin.com](https://linkedin.com) [https://zoom.us](https://zoom.us) [https://zoom.com.cn](https://zoom.com.cn) https://_.zoom.com.cn ‘self’; img-src https: http: about: blob: data: ‘self’; style-src https: safari-extension: chrome-extension: ‘unsafe-inline’ data: ‘self’; font-src https: safari-extension: chrome-extension: blob: data: ‘self’; connect-src \* about: blob: data: ‘self’; media-src \* rtmp: blob: data: ‘self’; frame-src https: ms-appx-web: zoommtg: zoomus: wvjbscheme: data: ‘self’”, I20200522-17:39:30.568(-4)? ‘set-cookie’: [Array], I20200522-17:39:30.568(-4)? p3p: ‘CP=“NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM”’, I20200522-17:39:30.568(-4)? ‘cache-control’: ‘no-store’, I20200522-17:39:30.569(-4)? pragma: ‘no-cache’ I20200522-17:39:30.569(-4)? }, I20200522-17:39:30.569(-4)? data: { I20200522-17:39:30.569(-4)? reason: ‘Invalid request : Client ID mismatch’, I20200522-17:39:30.569(-4)? error: ‘invalid\_client’ I20200522-17:39:30.569(-4)? } I20200522-17:39:30.569(-4)? } I20200522-17:39:30.569(-4)? } **Which App Type (OAuth / Chatbot / JWT / Webhook)?** OAuth **Which Endpoint/s?** > **[OAuth 2.0 - Authorization - Documentation](https://marketplace.zoom.us/docs/guides/auth/oauth)** > > OAuth with Zoom > > The Zoom API uses OAuth 2.0 to authenticate and authorize users to make requests. To setup access credentials and request scopes for yo... POST request at url: [https://zoom.us/oauth/token?grant\_type=authorization\_code&code=${code}&redirect\_uri=http://44aedc9a.ngrok.io/redirect](https://zoom.us/oauth/token?grant_type=authorization_code&code=%24%7Bcode%7D&redirect_uri=http://44aedc9a.ngrok.io/redirect) header: { Authorization: `Basic ${hash}` } ---
**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\ **Post date:** [May 28, 2020, 8:56pm UTC](https://devforum.zoom.us/t/invalid-request-client-id-mismatch-error/18797/2 "2020-05-28T20:56:22Z")
Hey @haydenr, Are you installing the test version (uses development client id) or the production version (uses production client id) of app? Thanks, Tommy ---
**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\ **Post date:** [August 21, 2020, 9:35pm UTC](https://devforum.zoom.us/t/invalid-request-client-id-mismatch-error/18797/3 "2020-08-21T21:35:41Z")
Closed on August 21, 2020, 9:35pm UTC