# OAuth Refresh Token usable after 90 days?

**URL:** <https://devforum.zoom.us/t/oauth-refresh-token-usable-after-90-days/101454>\
**Category:** API and Webhooks\
**Tags:** api, s2s-oauth\
**Created:** [January 9, 2024, 4:50am UTC](https://devforum.zoom.us/t/oauth-refresh-token-usable-after-90-days/101454 "2024-01-09T04:50:55Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![austin\_rz](https://avatars.discourse-cdn.com/v4/letter/a/cdc98d/32.png) [@austin\_rz](https://devforum.zoom.us/u/austin_rz)\
**Post date:** [January 9, 2024, 4:50am UTC](https://devforum.zoom.us/t/oauth-refresh-token-usable-after-90-days/101454/1 "2024-01-09T04:50:55Z")

</div>

I have a multitenancy application that is set up with an OAuth Zoom App integration. OAuth integration goes well, and generally speaking the refresh token is changed out for a new access + refresh token. There are some scenarios where the refresh token may not be used/changed for more than 90 days and I see that that is the new expiration time on those (compared to the previous 15 years).

Is my only option for getting new tokens, to re-authenticate the application?

Furthermore, I was trying to identify what the error here looks like, or even the scenario. I assume it’s a 4XX error upon token refresh request, but can someone confirm or point me where the docs are for the error responses? I have seen error code “invalid\_grant” but I am not sure if that’s it exactly. I only found this page for refreshing access tokens: [OAuth for user authorized apps](https://developers.zoom.us/docs/integrations/oauth/#refreshing-an-access-token)

---

<div class="post-metadata">

**Author:** ![ojus.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/ojus.zoom/32/734_2.png) [@ojus.zoom](https://devforum.zoom.us/u/ojus.zoom)\
**Post date:** [January 10, 2024, 12:02am UTC](https://devforum.zoom.us/t/oauth-refresh-token-usable-after-90-days/101454/2 "2024-01-10T00:02:37Z")

</div>

@austin_rz You can set up a logic where it automatically get a new pair of access token, refresh token if not done within 90 days. If not, then the user will have to re-authenticate the app.

---

<div class="post-metadata">

**Author:** ![austin\_rz](https://avatars.discourse-cdn.com/v4/letter/a/cdc98d/32.png) [@austin\_rz](https://devforum.zoom.us/u/austin_rz)\
**Post date:** [January 12, 2024, 2:56pm UTC](https://devforum.zoom.us/t/oauth-refresh-token-usable-after-90-days/101454/3 "2024-01-12T14:56:44Z")

</div>

Hey Ojus, thanks for the reply. That seems like the most logical solution; setting up a daily job or something that just refreshes everyone’s tokens just in case. Thank you!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [January 13, 2024, 2:57pm UTC](https://devforum.zoom.us/t/oauth-refresh-token-usable-after-90-days/101454/4 "2024-01-13T14:57:43Z")

</div>

Closed on January 13, 2024, 2:57pm UTC

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.