Issues with Refresh Token Expiration/Invalidation in Account-Level OAuth App

Hello Zoom Developer Community,

I am experiencing an issue with refreshing OAuth tokens for an Account-level Zoom app. Here are the details of the problem:

  • Background: We have an Account-level Zoom app used by many users. The OAuth tokens for these users have expired, with the most recent expiration date being July 31, 2023.

  • Problem: We have not attempted to refresh these tokens before, and now we are trying to refresh tokens that have been expired for over a year. Unfortunately, the refresh attempts are failing, and we are receiving errors indicating that the tokens are invalid or expired.

  • Error Received: The specific error returned is invalid_grant with a message stating Invalid Token!.

Key Points:

  1. Token Expiration: The tokens in question have not been refreshed in the past year and have expired as of July 31, 2023.

  2. Token Refresh Attempts: Despite using the most recent refresh tokens stored in our database, the refresh process fails.

  3. User Impact: This issue affects multiple users, making it critical to resolve.

Questions:

  1. Token Validity: Are there any specific limitations or considerations regarding the refresh token’s validity after such an extended period?

  2. Handling Long-Term Expired Tokens: What are the best practices for handling tokens that have been expired for a year or more? Is there a way to refresh them or an alternative approach?

  3. Zoom Support: Can Zoom provide any insights or potential solutions for tokens that have been inactive for a long time?

Any guidance or advice on how to handle this situation would be greatly appreciated. Thank you!


Hi @bhanudev365
Thanks for reaching out to us!
It sounds like you’re running into some trouble with refreshing old OAuth tokens.

Our refresh tokens expire after 90 days, find more information about that here:

As it has been more than 90 days, you will have to ask your app users to reauthorize the app to get a new set of access and refresh tokens.

Make sure to consider this and have a system to refresh tokens regularly
Cheers,
Elisa

1 Like