# OAuth Access Tokens for Admin App

**URL:** <https://devforum.zoom.us/t/oauth-access-tokens-for-admin-app/44404>\
**Category:** API and Webhooks\
**Created:** [February 27, 2021, 3:31am UTC](https://devforum.zoom.us/t/oauth-access-tokens-for-admin-app/44404 "2021-02-27T03:31:14Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jgutenplan](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jgutenplan/32/22122_2.png) [@jgutenplan](https://devforum.zoom.us/u/jgutenplan)\
**Post date:** [February 27, 2021, 3:31am UTC](https://devforum.zoom.us/t/oauth-access-tokens-for-admin-app/44404/1 "2021-02-27T03:31:15Z")

</div>

**Description**  
For an OAuth admin app, if I request a new access token, does the old access token become invalid?  
Currently I am testing in two dev env with one zoom account. When I associate the admin app to one env, then the other, the first access token returns expired. Is this expected behavior? If I created a user app instead of an admin app would this allow more than one access token at a time? I could then have the zoom account admin limit the installation of the app by user I suppose instead of using the admin app to force an admin to install. The app I am developing does not need user specific access just account level for an account dashboard.

**Which App Type (OAuth / Chatbot / JWT / Webhook)?**  
OAuth

---

<div class="post-metadata">

**Author:** ![will.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/will.zoom/32/14417_2.png) [@will.zoom](https://devforum.zoom.us/u/will.zoom)\
**Post date:** [March 1, 2021, 4:49pm UTC](https://devforum.zoom.us/t/oauth-access-tokens-for-admin-app/44404/2 "2021-03-01T16:49:00Z")

</div>

Hi @jgutenplan,

Good questions, happy to clarify.

> For an OAuth admin app, if I request a new access token, does the old access token become invalid?  
> Currently I am testing in two dev env with one zoom account. When I associate the admin app to one env, then the other, the first access token returns expired. Is this expected behavior?

To clarify, when you request a new access\_token, this does invalidate the old access token. This would be expected behavior.

> If I created a user app instead of an admin app would this allow more than one access token at a time?

The behavior would be the same for a user level app—when a new access token is requested, the previous one is invalidated.

Keep in mind that access tokens expire after one hour. Once expired, you will have to refresh a user’s access token. The purpose of the refresh token is to request a new access token. Although the refresh token expires after 15 years, it becomes invalid after it is used to request a new access token. You will receive a new refresh token pair and an access token once you use the old refresh token. (You will have to update these old values with new ones.)

I hope this helps to clarify, but let me know if you have questions about this.

Thanks!  
Will

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [April 1, 2021, 2:49am UTC](https://devforum.zoom.us/t/oauth-access-tokens-for-admin-app/44404/3 "2021-04-01T02:49:58Z")

</div>

Closed on April 1, 2021, 2:49am UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.