# "Invalid Token!" error message when trying to refresh oauth token

**URL:** <https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363>\
**Category:** API and Webhooks\
**Created:** [April 15, 2020, 5:58pm UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363 "2020-04-15T17:58:14Z")\
**Posts on this page:** 20\
**Page:** 2

<div class="post-metadata">

**Author:** ![devdev](https://avatars.discourse-cdn.com/v4/letter/d/3d9bf3/32.png) [@devdev](https://devforum.zoom.us/u/devdev)\
**Post date:** [May 6, 2020, 9:01am UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/21 "2020-05-06T09:01:09Z")

</div>

I have the same problem.

---

<div class="post-metadata">

**Author:** ![picktime](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/picktime/32/75234_2.png) [@picktime](https://devforum.zoom.us/u/picktime)\
**Post date:** [May 6, 2020, 10:06pm UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/22 "2020-05-06T22:06:39Z")

</div>

Hi @tommy

Any update regarding this issue ?

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [May 8, 2020, 5:46am UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/23 "2020-05-08T05:46:31Z")

</div>

Hey @picktime, @devdev, @basil, @shivam, @jk1,

@laimonas issue was [the tokens were revoked](https://marketplace.zoom.us/docs/guides/auth/oauth#revoking), hence they cannot be refreshed.

Double check if you [revoked the users token](https://marketplace.zoom.us/docs/guides/auth/oauth#revoking). If your issue is different, please provide your request details and steps to reproduce the issue.

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![picktime](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/picktime/32/75234_2.png) [@picktime](https://devforum.zoom.us/u/picktime)\
**Post date:** [May 8, 2020, 7:11am UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/24 "2020-05-08T07:11:34Z")

</div>

Hi @tommy,

Is there a way we can connect over Zoom. I can screen share and show you our logs, so you can test and check what’s going wrong and why the latest refresh token is showing as revoked without being revoked by our app or the user?

---

<div class="post-metadata">

**Author:** ![laimonas](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/laimonas/32/2403_2.png) [@laimonas](https://devforum.zoom.us/u/laimonas)\
**Post date:** [May 8, 2020, 9:49am UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/25 "2020-05-08T09:49:36Z")

</div>

@tommy we don’t call revoke anywhere in our implementation. How does the token get revoked? Can you tell in the logs who/how it was revoked? That sounds suspicious to me. We have had this happen to some of our internal users so we get better feedback than public users, and they said they did not do anything special with their zoom accounts that they could remember.

Our implementation does not call revoke.

---

<div class="post-metadata">

**Author:** ![hima](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/hima/32/8048_2.png) [@hima](https://devforum.zoom.us/u/hima)\
**Post date:** [May 8, 2020, 6:37pm UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/26 "2020-05-08T18:37:51Z")

</div>

Joining the party 🙂 We are getting the same error.  
And, yes we have looked into everything discussed on this thread so far.

---

<div class="post-metadata">

**Author:** ![mark.mayer](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/mark.mayer/32/7966_2.png) [@mark.mayer](https://devforum.zoom.us/u/mark.mayer)\
**Post date:** [May 8, 2020, 7:05pm UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/27 "2020-05-08T19:05:24Z")

</div>

I had this happen with JWT, the token wasn’t associated correctly in the Marketplace App.

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [May 13, 2020, 12:06am UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/29 "2020-05-13T00:06:53Z")

</div>

Hey @picktime,

I have sent you a private message.

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [May 13, 2020, 12:08am UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/30 "2020-05-13T00:08:32Z")

</div>

Hey @mark.mayer,

Were you able to resolve the issue?

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [May 13, 2020, 12:09am UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/31 "2020-05-13T00:09:02Z")

</div>

Hey @hima,

Please private message me one of your expired access tokens so I can debug.

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [May 13, 2020, 12:10am UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/32 "2020-05-13T00:10:09Z")

</div>

Hey @laimonas,

Please see my private message.

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![beek](https://avatars.discourse-cdn.com/v4/letter/b/ee59a6/32.png) [@beek](https://devforum.zoom.us/u/beek)\
**Post date:** [May 13, 2020, 11:55am UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/33 "2020-05-13T11:55:06Z")

</div>

Hello,

I’m experiencing the same issue but i’m not sure if that suppose to be the standard behavior or not. My worflow is as follow:

- user1 connect its zoom account to our app
- user2 connect the zoom account use by user1 to our app (both get different access token and refresh token)
- user2 revoke its access token
- user1 cannot use and cannot refresh its access token anymore. “Invalid token” are thrown even if he does not use the revocated token.

Can users share the same account ?

Thanks,

---

<div class="post-metadata">

**Author:** ![mark.mayer](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/mark.mayer/32/7966_2.png) [@mark.mayer](https://devforum.zoom.us/u/mark.mayer)\
**Post date:** [May 13, 2020, 6:36pm UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/34 "2020-05-13T18:36:07Z")

</div>

Yes, this issue is resolved. Thanks for reaching out.

---

<div class="post-metadata">

**Author:** ![neecholai](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/neecholai/32/4241_2.png) [@neecholai](https://devforum.zoom.us/u/neecholai)\
**Post date:** [May 14, 2020, 4:16pm UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/35 "2020-05-14T16:16:25Z")

</div>

@tommy Getting the same error. Have looked into everything in this thread.

api call to get new refresh\_token works if made right after initial access\_token generation, but it appears that after some time it’s becoming invalid (perhaps at the same time that the access\_token is expiring).

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [May 14, 2020, 5:07pm UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/36 "2020-05-14T17:07:45Z")

</div>

Happy to hear you got it working @mark.mayer 🙂

-Tommy

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [May 14, 2020, 5:08pm UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/37 "2020-05-14T17:08:48Z")

</div>

Hey @beek,

> [@beek](#):
>
> user2 connect the zoom account use by user1 to our app (both get different access token and refresh token)

Can you clarify this step? I am confused.

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [May 14, 2020, 5:09pm UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/38 "2020-05-14T17:09:45Z")

</div>

Hey @neecholai,

Make sure you are always using the newest refresh\_token that is returned with every [refresh request](https://marketplace.zoom.us/docs/guides/auth/oauth#refreshing).

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![picktime](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/picktime/32/75234_2.png) [@picktime](https://devforum.zoom.us/u/picktime)\
**Post date:** [May 14, 2020, 5:10pm UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/39 "2020-05-14T17:10:12Z")

</div>

Hey @tommy

We appreciate you helping us fix the issue. Now it works. Thanks.

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [May 14, 2020, 5:14pm UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/40 "2020-05-14T17:14:51Z")

</div>

Happy to help @picktime!

In case this can help others, Picktime’s issue was an empty space in the [authorize url](https://marketplace.zoom.us/docs/guides/auth/oauth#step-1-request-user-authorization) between the client\_id and redirect\_url query param:

```nohighlight
https://zoom.us/oauth/authorize?response_type=code&client_id={client_id} &redirect_uri={redirect_url}

```

-Tommy

---

<div class="post-metadata">

**Author:** ![neecholai](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/neecholai/32/4241_2.png) [@neecholai](https://devforum.zoom.us/u/neecholai)\
**Post date:** [May 14, 2020, 5:18pm UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/41 "2020-05-14T17:18:43Z")

</div>

@tommy Yep! using the newest refresh token.

I tested with Insomnia as well for my requests.

1. Successfully created access token / refresh\_token
2. 2 minutes later =\> successfully refreshed token
3. 8 hours later =\> Copy/pasted returned refresh token from step 2 and attempted another refresh. Received Invalid Token error described above

I haven’t published my app yet, could that be the issue?  
My calls are working to refresh the token if they’re made recently after initial access token creation, but not later.

[Previous page](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363.md?page=1)

[Next page](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363.md?page=3)
