# "Invalid Token!" error message when trying to refresh oauth token

**URL:** <https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363>\
**Category:** API and Webhooks\
**Created:** [April 15, 2020, 5:58pm UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363 "2020-04-15T17:58:14Z")\
**Posts on this page:** 1\
**Showing post:** 88

<div class="post-metadata">

**Author:** ![will.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/will.zoom/32/14417_2.png) [@will.zoom](https://devforum.zoom.us/u/will.zoom)\
**Post date:** [November 16, 2020, 10:11pm UTC](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363/88 "2020-11-16T22:11:08Z")

</div>

Hey @budgetcriticism,

Good question. One option could be to grab the access token when a user installs the app. You can JWT decode this to determine which user/account it belongs to. You can see my post here for more details on this approach (different topic, but decoding the access token is still relevant):

> [@Deauthorization endpoint user identification](https://devforum.zoom.us/t/deauthorization-endpoint-user-identification/33047/6):
>
> Hey @dave2 , Thank you for clarifying, and my sincere apologies for not catching your concern from the onset. I understand now that you’re essentially looking to make this connection with a customer’s Account ID as soon as they authorize/install the app, so that you can then have this record on your end when they uninstall (but please correct me if I’m misunderstanding). While there’s not a completely straight forward way to track this, there is a suggestion I can make: When an account author…

Let me know if this helps,  
Will

---

_[View the full topic](https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363)._