# URGENT: all API calls returning Invalid token. **URL:** \ **Category:** API and Webhooks\ **Created:** [June 18, 2018, 12:08pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362 "2018-06-18T12:08:03Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![Albert\_Recolons\_DEV](https://avatars.discourse-cdn.com/v4/letter/a/45deac/32.png) [@Albert\_Recolons\_DEV](https://devforum.zoom.us/u/Albert_Recolons_DEV)\ **Post date:** [June 18, 2018, 12:08pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362/1 "2018-06-18T12:08:03Z")
Hello.  We’re experiencing problems with the API on the 6 different accounts we use in our different environments (dev, preproduction, production). Each call we do to the API it returns “Invalid TOKEN”.  We’re using v2 of the API. We’ve checked all the Api Keys and Secrets and everything is looking fine. No change have been done in our side, last Friday was working. We just realised you have been updated the web and the API last weekend: [https://support.zoom.us/hc/en-us/articles/204758419-New-Updates-for-Web](https://support.zoom.us/hc/en-us/articles/204758419-New-Updates-for-Web) This is an URGENT issue that is affecting our clients. Please, can you respond ASAP? Thanks ---
**Author:** ![michael\_p.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael_p.zoom/32/18105_2.png) [@michael\_p.zoom](https://devforum.zoom.us/u/michael_p.zoom)\ **Post date:** [June 18, 2018, 2:00pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362/2 "2018-06-18T14:00:31Z")
Hi Albert,  Can you send us your account ID to [developersupport@zoom.us](mailto:developerssupport@zoom.us)? From there we can take a closer look to resolve the issue. Thanks ---
**Author:** ![Albert\_Recolons\_DEV](https://avatars.discourse-cdn.com/v4/letter/a/45deac/32.png) [@Albert\_Recolons\_DEV](https://devforum.zoom.us/u/Albert_Recolons_DEV)\ **Post date:** [June 18, 2018, 2:14pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362/3 "2018-06-18T14:14:47Z")
Hi, the email you mentioned is not working:[developerssupport@zoom.us](mailto:developerssupport@zoom.us) The email account that you tried to reach does not exist. Please try double-checking the recipient’s email address for typos or unnecessary spaces. Learn more at [https://support.google.com/mail/?p=NoSuchUser](https://support.google.com/mail/?p=NoSuchUser) p194-v6sor5096355iod.355 - gsmtp ---
**Author:** ![Albert\_Recolons\_DEV](https://avatars.discourse-cdn.com/v4/letter/a/45deac/32.png) [@Albert\_Recolons\_DEV](https://devforum.zoom.us/u/Albert_Recolons_DEV)\ **Post date:** [June 18, 2018, 2:20pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362/4 "2018-06-18T14:20:08Z")
I sent it again to [developersupport@zoom.us](mailto:developersupport@zoom.us), please can you confirm that you received it? ---
**Author:** ![michael\_p.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael_p.zoom/32/18105_2.png) [@michael\_p.zoom](https://devforum.zoom.us/u/michael_p.zoom)\ **Post date:** [June 18, 2018, 2:27pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362/5 "2018-06-18T14:27:54Z")
Hi Albert,  Yes we have received it, the correct email was [developersupport@zoom.us](mailto:developersupport@zoom.us). We will get back to your shortly.  Thanks Michael ---
**Author:** ![Albert\_Recolons\_DEV](https://avatars.discourse-cdn.com/v4/letter/a/45deac/32.png) [@Albert\_Recolons\_DEV](https://devforum.zoom.us/u/Albert_Recolons_DEV)\ **Post date:** [June 18, 2018, 3:54pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362/6 "2018-06-18T15:54:10Z")
Do  you have any update on this? ---
**Author:** ![Vladimir\_Solis\_Barqu](https://avatars.discourse-cdn.com/v4/letter/v/eada6e/32.png) [@Vladimir\_Solis\_Barqu](https://devforum.zoom.us/u/Vladimir_Solis_Barqu)\ **Post date:** [June 18, 2018, 4:39pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362/7 "2018-06-18T16:39:59Z")
We are experiencing the same problem. It is urgent for us to have a solution for this. Do you have an ETA for having this solved? ---
**Author:** ![Jason\_Gonzalez\_B](https://avatars.discourse-cdn.com/v4/letter/j/2acd7d/32.png) [@Jason\_Gonzalez\_B](https://devforum.zoom.us/u/Jason_Gonzalez_B)\ **Post date:** [June 18, 2018, 4:44pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362/8 "2018-06-18T16:44:59Z")
The same here, have you any update of this? ---
**Author:** ![Albert\_Recolons\_DEV](https://avatars.discourse-cdn.com/v4/letter/a/45deac/32.png) [@Albert\_Recolons\_DEV](https://devforum.zoom.us/u/Albert_Recolons_DEV)\ **Post date:** [June 18, 2018, 4:53pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362/9 "2018-06-18T16:53:34Z")
By our side we have tested different solutions we found in the forums, but no one is working. - Adding the origin header with “[https://developers.zoom.us](https://developers.zoom.us)” - Sending the token in the querystring instead of the header. They had an update this weekend so I think they have a serious issue there… Anyway, I miss some feedback from them with an explanation and ETA. Albert ---
**Author:** ![Jason\_Gonzalez\_B](https://avatars.discourse-cdn.com/v4/letter/j/2acd7d/32.png) [@Jason\_Gonzalez\_B](https://devforum.zoom.us/u/Jason_Gonzalez_B)\ **Post date:** [June 18, 2018, 5:15pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362/10 "2018-06-18T17:15:29Z")
We already fixed the problem in our side, our token was generated using HS512, we changed it to use HS256 and now it’s working. But all last week it was working perfectly, maybe they made some change on that part. ---
**Author:** ![michael\_p.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael_p.zoom/32/18105_2.png) [@michael\_p.zoom](https://devforum.zoom.us/u/michael_p.zoom)\ **Post date:** [June 18, 2018, 5:17pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362/11 "2018-06-18T17:17:42Z")
Hi Everyone, We have received your feedback. Our Engineering team is currently looking into the issue to resolve this urgent issue.    ---
**Author:** ![Albert\_Recolons\_DEV](https://avatars.discourse-cdn.com/v4/letter/a/45deac/32.png) [@Albert\_Recolons\_DEV](https://devforum.zoom.us/u/Albert_Recolons_DEV)\ **Post date:** [June 18, 2018, 5:19pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362/12 "2018-06-18T17:19:37Z")
We were generating it using HS256 before the issue. ---
**Author:** ![TimZoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/timzoom/32/978_2.png) [@TimZoom](https://devforum.zoom.us/u/TimZoom)\ **Post date:** [June 18, 2018, 5:22pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362/13 "2018-06-18T17:22:30Z")
Albert, can you share the code you are using to generate the JWT?  ---
**Author:** ![Albert\_Recolons\_DEV](https://avatars.discourse-cdn.com/v4/letter/a/45deac/32.png) [@Albert\_Recolons\_DEV](https://devforum.zoom.us/u/Albert_Recolons_DEV)\ **Post date:** [June 18, 2018, 6:02pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362/14 "2018-06-18T18:02:45Z")
Here is the code: private string GenerateToken() { JwtSecurityTokenHandler jwtSecurityTokenHandler = new JwtSecurityTokenHandler(); //we build the security key using the secret key var securityKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(UZGlobal.constants.ZoomApiSecret)); //we generate the credentials using the security key and the documented algorithm for Zoom API var signingCredentials = new SigningCredentials(securityKey, SecurityAlgorithms.HmacSha256); //we create the claims, for Zoom API iss (Issuer) and exp (Expiration) are needed List\ claims = new List\(); claims.Add(new Claim(“iss”, UZGlobal.constants.ZoomApiKey)); //timestamp for token expiration date. If we switch to .NET4.6 we can use a native function of Datetime long epochTicks = new DateTime(1970, 1, 1).Ticks; long unixTime = ((DateTime.UtcNow.AddHours(1).Ticks - epochTicks) / TimeSpan.TicksPerMillisecond); claims.Add(new Claim(“exp”, unixTime.ToString())); //we build the payload data with the previous claims, the header and the security token needed for getting the token JwtPayload payload = new JwtPayload(claims.AsEnumerable\()); var header = new JwtHeader(signingCredentials); var securityToken = new JwtSecurityToken(header, payload); //we get the token return jwtSecurityTokenHandler.WriteToken(securityToken); } ---
**Author:** ![TimZoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/timzoom/32/978_2.png) [@TimZoom](https://devforum.zoom.us/u/TimZoom)\ **Post date:** [June 18, 2018, 6:08pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362/15 "2018-06-18T18:08:23Z")
Can you try using the [JWT.io](http://JWT.io) library? We have had much greater success with this with all of our clients. It is very easy to implement. Can you try this and let me know if this resolves the problem?  You can find the libraries at [jwt.io](http://jwt.io) ---
**Author:** ![Albert\_Recolons\_DEV](https://avatars.discourse-cdn.com/v4/letter/a/45deac/32.png) [@Albert\_Recolons\_DEV](https://devforum.zoom.us/u/Albert_Recolons_DEV)\ **Post date:** [June 18, 2018, 6:15pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362/16 "2018-06-18T18:15:14Z")
Hi Tim, I am out of the office right now. I think there’s no problem to use the jwt library, but it’s not possible to do it right now. Anyway this is something that we should know before the update! This change let our clients more than 10 ours without service! Is there any way to solve it by your side?   ---
**Author:** ![TimZoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/timzoom/32/978_2.png) [@TimZoom](https://devforum.zoom.us/u/TimZoom)\ **Post date:** [June 18, 2018, 6:26pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362/17 "2018-06-18T18:26:56Z")
I don’t think so. We do not see a problem with the API on our end. If we could get on a call we could probably root cause this but at the moment we don’t have complete data and in our testing all of our generated JWTs work.    If you want to get on a call you can respond to Michael’s email.  ---
**Author:** ![Albert\_Recolons\_PRE](https://avatars.discourse-cdn.com/v4/letter/a/da6949/32.png) [@Albert\_Recolons\_PRE](https://devforum.zoom.us/u/Albert_Recolons_PRE)\ **Post date:** [June 18, 2018, 6:52pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362/18 "2018-06-18T18:52:55Z")
Hi Tim, We are using the official JWT library to generate the token. Something has changed on your side verifying the signature of the JWT. ![](https://support.zoom.us/hc/user_images/sJfKxnwoDt817lAn_Jf-xg.png) ---
**Author:** ![TimZoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/timzoom/32/978_2.png) [@TimZoom](https://devforum.zoom.us/u/TimZoom)\ **Post date:** [June 18, 2018, 7:10pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362/19 "2018-06-18T19:10:30Z")
Interesting. Are you on v5.1.5? Can you try the latest version? I am trying to triage the best I can through an internet forum. Being on a call would be much more efficient.  With full disclosure, we did update the JWT library so it could be an issue with older versions of the JWT library but without knowing for sure we can’t rollback. Being the only known report of this issue we have to be sure what the problem is before we make any changes.  Are you generating short-lived tokens or are you using a token that has a chance to be expired? ---
**Author:** ![Tony\_Sotos](https://avatars.discourse-cdn.com/v4/letter/t/db5fbb/32.png) [@Tony\_Sotos](https://devforum.zoom.us/u/Tony_Sotos)\ **Post date:** [June 18, 2018, 7:25pm UTC](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362/20 "2018-06-18T19:25:55Z")
Hi Tim, I am having the same problem using v5.2.1 of that System.IdentityModel.Tokens.Jwt library. I sent an email this morning to developersupport but have not received a response. Our tokens are set to expire in 10 mins and everything was working last week. The tokens seem to validate fine in the [jwt.io](http://jwt.io) debugger. Thanks, Tony [Next page](https://devforum.zoom.us/t/urgent-all-api-calls-returning-invalid-token/1362.md?page=2)