# Question regarding OAuth authorization and subsequent calls

**URL:** <https://devforum.zoom.us/t/question-regarding-oauth-authorization-and-subsequent-calls/66265>\
**Category:** API and Webhooks\
**Created:** [March 23, 2022, 1:27am UTC](https://devforum.zoom.us/t/question-regarding-oauth-authorization-and-subsequent-calls/66265 "2022-03-23T01:27:14Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![MultiplayerSession](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/multiplayersession/32/66446_2.png) [@MultiplayerSession](https://devforum.zoom.us/u/MultiplayerSession)\
**Post date:** [March 23, 2022, 4:35pm UTC](https://devforum.zoom.us/t/question-regarding-oauth-authorization-and-subsequent-calls/66265/4 "2022-03-23T16:35:50Z")

</div>

My understanding is the authorization code is one-use. You need to exchange that for an access token for something that can be reused; for details, see “Step 2: Request Access Token” in [OAuth with Zoom](https://marketplace.zoom.us/docs/api-reference/using-zoom-apis#authorization-code).

While you’re there, note that the intention is to eventually make Proof Key for Code Exchange (PKCE) a requirement, but it is currently [on hold due to interoperability concerns](https://devforum.zoom.us/t/zoom-oauth-2-0-proof-key-for-code-exchange-pkce-flow/63830).

---

_[View the full topic](https://devforum.zoom.us/t/question-regarding-oauth-authorization-and-subsequent-calls/66265)._