# Revoking access token also revokes refresh token

**URL:** <https://devforum.zoom.us/t/revoking-access-token-also-revokes-refresh-token/44427>\
**Category:** API and Webhooks\
**Created:** [February 27, 2021, 6:48pm UTC](https://devforum.zoom.us/t/revoking-access-token-also-revokes-refresh-token/44427 "2021-02-27T18:48:18Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![webhostuni](https://avatars.discourse-cdn.com/v4/letter/w/f9ae1b/32.png) [@webhostuni](https://devforum.zoom.us/u/webhostuni)\
**Post date:** [February 27, 2021, 6:48pm UTC](https://devforum.zoom.us/t/revoking-access-token-also-revokes-refresh-token/44427/1 "2021-02-27T18:48:18Z")

</div>

Hello everyone i am working on refresh token functionality in my app , so i am revoking the access token from postman , but i am runnig into an issue , when i use [https://zoom.us/oauth/token?grant\_type=refresh\_token&refresh\_token={{refresh\_token}](https://zoom.us/oauth/token?grant_type=refresh_token&refresh_token=%7B%7Brefresh_token%7D)} i get as response this message data: { reason: ‘Invalid Token!’, error: ‘invalid\_request’ }.

For revoke accees token i am using this endpoint  
[https://zoom.us/oauth/revoke?token={{token}](https://zoom.us/oauth/revoke?token=%7B%7Btoken%7D)}

I am using zoom oAuth

I would appreciate your help.

i will add some screeshots.

 ![zoom 2](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/a/8/a8e036f8bf6c8a871e8e0d804a76a68f4ba42b9e.png)

---

<div class="post-metadata">

**Author:** ![will.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/will.zoom/32/14417_2.png) [@will.zoom](https://devforum.zoom.us/u/will.zoom)\
**Post date:** [March 1, 2021, 4:52pm UTC](https://devforum.zoom.us/t/revoking-access-token-also-revokes-refresh-token/44427/2 "2021-03-01T16:52:46Z")

</div>

Hey @webhostuni,

Thanks for reaching out about this, and happy to help.

In taking a look at your request, it looks like your request URL is a bit off for revoking a token. I see that you’ve included a `refresh_token` parameter, but this is not necessary. To revoke a token, your request should look something like this:

```auto
POST https://zoom.us/oauth/revoke?token=eyJhbGciOiJIUzUxMiIsInYiOiIyLjAiLCJraWQiOiI8S0lEPiJ9.eyJ2ZXIiOiI2IiwiY2xpZW50SWQiOiI8Q2xpZW50X0lEPiIsImNvZGUiOiI8Q29kZT4iLCJpc3MiOiJ1cm46em9vbTpjb25uZWN0OmNsaWVudGlkOjxDbGllbnRfSUQ-IiwiYXV0aGVudGljYXRpb25JZCI6IjxBdXRoZW50aWNhdGlvbl9JRD4iLCJ1c2VySWQiOiI8VXNlcl9JRD4iLCJncm91cE51bWJlciI6MCwiYXVkIjoiaHR0cHM6Ly9vYXV0aC56b29tLnVzIiwiYWNjb3VudElkIjoiPEFjY291bnRfSUQ-IiwibmJmIjoxNTgwMTQ3Mzk0LCJleHAiOjE1ODAxNTA5OTQsInRva2VuVHlwZSI6ImFjY2Vzc190b2tlbiIsImlhdCI6MTU4MDE0NzM5NCwianRpIjoiPEpUST4iLCJ0b2xlcmFuY2VJZCI6MjZ9.5c58p0PflZJdlz4Y7PgMIVCrQpHDnbM565iCKlrtajZ5HHmy00P5FCcoMwHb9LxjsUgbJ7653EfdeX5NEm6RoA

```

Let me know if this helps—thanks!  
Will

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [April 1, 2021, 2:52am UTC](https://devforum.zoom.us/t/revoking-access-token-also-revokes-refresh-token/44427/3 "2021-04-01T02:52:55Z")

</div>

Closed on April 1, 2021, 2:52am UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.