# Received auth\_token but got error on any API call

**URL:** <https://devforum.zoom.us/t/received-auth-token-but-got-error-on-any-api-call/76240>\
**Category:** API and Webhooks\
**Tags:** webinar, api-requests\
**Created:** [September 20, 2022, 10:37am UTC](https://devforum.zoom.us/t/received-auth-token-but-got-error-on-any-api-call/76240 "2022-09-20T10:37:57Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![vfedorov](https://avatars.discourse-cdn.com/v4/letter/v/c67d28/32.png) [@vfedorov](https://devforum.zoom.us/u/vfedorov)\
**Post date:** [September 20, 2022, 10:37am UTC](https://devforum.zoom.us/t/received-auth-token-but-got-error-on-any-api-call/76240/1 "2022-09-20T10:37:57Z")

</div>

**1** ) Our “ **Server-to-Server OAuth** ” application is created, configured, and activated. We are communicating with Zoom API by server-to-server requests only (no callbacks or webhooks are expected) from node.js, trying to integrate the Webinars into our system. And of course, during the integration, all requests are sent from the [http://localhost:8080](http://localhost:8080)

**2** ) User role settings are configured to allow Server-to-Server OAuth requests for view and edit.

**3** ) POST request from server side to [/oauth/token?grant\_type=client\_credentials] return’s a correct **access\_token** (that means **client\_id** and **client\_secret** are correct, and properly passed in Authorization request header).

**4** ) All other API requests using received **access\_token** are failed with error: `{code: 200, message: “Invalid api key or secret.”}`

**5** ) What is the solution?

…two days of stupid investigations, reading tons of your docs and similar issue suggestions, and finally seems I found the right solution, but it is suddenly not mentioned in your docs!

**CAN YOU PLEASE REPLY WITH THE LINK, WHERE IN YOUR DOCS WE CAN SEE ALL GRANT TYPES?**

in your dosc: **/oauth/token?grant\_type=client\_credentials**  
the right one: **/oauth/token?grant\_type=account\_credentials&&account\_id={ACCOUNT\_ID}**

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [September 20, 2022, 9:33pm UTC](https://devforum.zoom.us/t/received-auth-token-but-got-error-on-any-api-call/76240/2 "2022-09-20T21:33:24Z")

</div>

Hi @vfedorov  
Thanks for reaching out to the Zoom Developer Forum, I am happy to help here!  
First of all, I am sorry to hear that it was hard for you to find the proper documentation.

Here is a link to our docs on Using account credentials to get an access token with the Server-to-Server Oauth app:

[https://marketplace.zoom.us/docs/guides/build/server-to-server-oauth-app/#use-account-credentials-to-get-an-access-token](https://marketplace.zoom.us/docs/guides/build/server-to-server-oauth-app/#use-account-credentials-to-get-an-access-token)

Also, feel free to refer to this post:

> [@How to user Server-to-Sever OAuth app with Postman](https://devforum.zoom.us/t/how-to-user-server-to-sever-oauth-app-with-postman/70848):
>
> How to use our Server-to-Server OAuth with Postman? As some of you might be aware of, our JWT app is being deprecated by June 2023 and we encourage you to migrate to the newly introduced [Server-to-Server OAuth App](https://marketplace.zoom.us/docs/guides/build/server-to-server-oauth-app) That being said, here is a quick and simple guide on how to use or new app with Postman As stated in our documentation here: This new app type facilitates OAuth-authenticated requests between servers without end-user involvement. And this grant type enable your private server a…

Hope this helps,  
Elisa

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [September 24, 2023, 1:10pm UTC](https://devforum.zoom.us/t/received-auth-token-but-got-error-on-any-api-call/76240/3 "2023-09-24T13:10:03Z")

</div>

Closed on September 24, 2023, 1:10pm UTC

This topic was automatically closed 368 days after the last reply. New replies are no longer allowed.
