# Invalid signature token

**URL:** <https://devforum.zoom.us/t/invalid-signature-token/113368>\
**Category:** Meeting SDK\
**Created:** [July 10, 2024, 11:46am UTC](https://devforum.zoom.us/t/invalid-signature-token/113368 "2024-07-10T11:46:23Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ashwini2](https://avatars.discourse-cdn.com/v4/letter/a/db5fbb/32.png) [@ashwini2](https://devforum.zoom.us/u/ashwini2)\
**Post date:** [July 10, 2024, 11:46am UTC](https://devforum.zoom.us/t/invalid-signature-token/113368/1 "2024-07-10T11:46:23Z")

</div>

My Meeting SDK Account uses server-to-server OAuth. I have been able to create meetings using the APIs, but on using the same client\_id and client\_secret to start a meeting with the Web Implementation of the SDK, I get the invalid signature error.

{  
“method”: “join”,  
“status”: false,  
“result”: “Invalid signature.”,  
“errorMessage”: “Signature is invalid.”,  
“errorCode”: 3712  
}

**Meeting SDK Code Snippets**  
`const iat = Math.round(new Date().getTime() / 1000) - 30;  
const exp = iat + 60 \* 60 \* 2;

const oHeader = { alg: ‘HS256’, typ: ‘JWT’ };

const oPayload = {  
sdkKey: sdkKey,  
mn: meetingNumber,  
role: role,  
iat: iat,  
exp: exp,  
appKey: sdkKey,  
tokenExp: exp  
};

const sHeader = JSON.stringify(oHeader);  
const sPayload = JSON.stringify(oPayload);  
const signature = KJUR.jws.JWS.sign(‘HS256’, sHeader, sPayload, sdkSecret);`

This is my key:  
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzZGtLZXkiOiIyZlpNQ1BlRVRXQ3Exb3QyUGRySnR3IiwibW4iOjgxODcwNzU1NDc1LCJyb2xlIjoxLCJpYXQiOjE3MjA2MTE4NjksImV4cCI6MTcyMDYxMTg5OSwidG9rZW5FeHAiOjE3MjA2MTE4OTl9.kE33DdzgJlmH2OS5I1cyh-QKyHXOZ9W0lZ29YeNyuZc

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [July 15, 2024, 7:05pm UTC](https://devforum.zoom.us/t/invalid-signature-token/113368/2 "2024-07-15T19:05:37Z")

</div>

Hi @ashwini2  
Thanks for reaching out to us!  
The issue you are seeing is expected. You should not be using your Server to Server OAuth credentials to create your signature.  
You should be working with a general app and use those credentials to generate your signature.

Here is one of our sample apps that could help you to troubleshoot this

> **[GitHub - zoom/meetingsdk-web-sample: Zoom Meeting SDK web sample](https://github.com/zoom/meetingsdk-web-sample)**
>
> Zoom Meeting SDK web sample. Contribute to zoom/meetingsdk-web-sample development by creating an account on GitHub.

Hope this helps!  
Elisa

---

<div class="post-metadata">

**Author:** ![ashwini2](https://avatars.discourse-cdn.com/v4/letter/a/db5fbb/32.png) [@ashwini2](https://devforum.zoom.us/u/ashwini2)\
**Post date:** [July 16, 2024, 5:23am UTC](https://devforum.zoom.us/t/invalid-signature-token/113368/3 "2024-07-16T05:23:36Z")

</div>

Thanks for the solution.