# Server-to-Server OAuth documentation bug

**URL:** <https://devforum.zoom.us/t/server-to-server-oauth-documentation-bug/84401>\
**Category:** Authentication\
**Created:** [March 9, 2023, 2:45am UTC](https://devforum.zoom.us/t/server-to-server-oauth-documentation-bug/84401 "2023-03-09T02:45:15Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![precisao](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/precisao/32/31723_2.png) [@precisao](https://devforum.zoom.us/u/precisao)\
**Post date:** [March 9, 2023, 2:45am UTC](https://devforum.zoom.us/t/server-to-server-oauth-documentation-bug/84401/1 "2023-03-09T02:45:15Z")

</div>

Dear Sirs,

In the following documentation page, the description of the successful response is not correct.

[https://marketplace.zoom.us/docs/guides/build/server-to-server-oauth-app/#successful-response](https://marketplace.zoom.us/docs/guides/build/server-to-server-oauth-app/#successful-response)

The property names must be written all lower case, and the token duration property is **expires\_in**. Summarizing, the correct would be:

```auto
{
      “access_token“: String,
      “token_type”: “bearer”,
      “expires_in”: long, // duration in seconds
      “scope” : String // multiple scopes separated by spaces
}

```

---

<div class="post-metadata">

**Author:** ![donte.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/donte.zoom/32/24412_2.png) [@donte.zoom](https://devforum.zoom.us/u/donte.zoom)\
**Post date:** [March 23, 2023, 1:34am UTC](https://devforum.zoom.us/t/server-to-server-oauth-documentation-bug/84401/2 "2023-03-23T01:34:17Z")

</div>

@precisao ,

Thank you for calling attention to this property name. I will share this feedback with the documentation team.

Best,  
Donte

---

<div class="post-metadata">

**Author:** ![Brent\_Putman](https://avatars.discourse-cdn.com/v4/letter/b/a88e57/32.png) [@Brent\_Putman](https://devforum.zoom.us/u/Brent_Putman)\
**Post date:** [August 12, 2023, 1:09am UTC](https://devforum.zoom.us/t/server-to-server-oauth-documentation-bug/84401/3 "2023-08-12T01:09:04Z")

</div>

I independently noticed these errors myself months ago, and I see 5 months after the initial report that they are still not fixed in the online docs.

This would seem pretty important to fix in a timely manner, given the impending deprecation of JWT apps and forced migration to Server-to-Server

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [August 29, 2023, 8:33pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-documentation-bug/84401/4 "2023-08-29T20:33:01Z")

</div>

@Brent_Putman  
Thanks for bringing this to our attention again.  
I will follow up internally  
Cheers,  
Elisa

---

<div class="post-metadata">

**Author:** ![Brent\_Putman](https://avatars.discourse-cdn.com/v4/letter/b/a88e57/32.png) [@Brent\_Putman](https://devforum.zoom.us/u/Brent_Putman)\
**Post date:** [September 1, 2023, 6:40pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-documentation-bug/84401/5 "2023-09-01T18:40:43Z")

</div>

I see that the doc page has been updated, but some of the updates are incorrect. It currently now says:

```auto
{
      “access_token“: [String],
      “token_type”: “bearer”,
      “expires_in”: long,
      “scope” : [String]
}

```

As the original poster said, the type of access\_token and scope is **String** , not array-of-String. So it should be this:

```auto
{
      “access_token“: String,
      “token_type”: “bearer”,
      “expires_in”: long,
      “scope” : String
}

```