# URGENT: API token signature invalid

**URL:** <https://devforum.zoom.us/t/urgent-api-token-signature-invalid/15325>\
**Category:** API and Webhooks\
**Created:** [April 29, 2020, 12:14am UTC](https://devforum.zoom.us/t/urgent-api-token-signature-invalid/15325 "2020-04-29T00:14:07Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![trevor\_c](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/trevor_c/32/7233_2.png) [@trevor\_c](https://devforum.zoom.us/u/trevor_c)\
**Post date:** [April 29, 2020, 12:14am UTC](https://devforum.zoom.us/t/urgent-api-token-signature-invalid/15325/1 "2020-04-29T00:14:08Z")

</div>

We’ve been using the moodle\_mod-zoom plugin successfully for quite some time.

Suddenly this afternoon we’re getting the following error message:

### Connection status: Connection failed: The Token’s Signature resulted invalid when verified using the Algorithm: HmacSHA256

There have been no code changes to the plugin on our end, which was functioning previously, so I am assuming this relates to the API or our account. While I have tried to pursue support through the account administrator, any advice would be appreciated. Thanks!

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [May 4, 2020, 6:07pm UTC](https://devforum.zoom.us/t/urgent-api-token-signature-invalid/15325/2 "2020-05-04T18:07:09Z")

</div>

Hey @trevor_c,

Can you please reach out to the developers who created the [Moodle app](https://marketplace.zoom.us/apps/TvvF_eSrSJi1yfEJrHMjBA)? Here is their support page:

[https://zoomsupport.cosocloud.com/dashboard](https://zoomsupport.cosocloud.com/dashboard)

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![trevor\_c](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/trevor_c/32/7233_2.png) [@trevor\_c](https://devforum.zoom.us/u/trevor_c)\
**Post date:** [May 4, 2020, 6:36pm UTC](https://devforum.zoom.us/t/urgent-api-token-signature-invalid/15325/3 "2020-05-04T18:36:36Z")

</div>

Thanks @tommy. I meant to come back and post an update.

I think the problem was that we were still on the legacy api, and another staff member created a new JWT app, which ended up generating a new api secret. Once I updated the secret in Moodle, everything worked as expected again.

It was one of those days.

And just to clarify, it wasn’t the cosocloud LTI Moodle app. We don’t have any experience with that.

We are using the moodle\_mod-zoom plugin from UCLA - [https://github.com/ucla/moodle-mod\_zoom](https://github.com/ucla/moodle-mod_zoom)

Thanks for following up!

---

<div class="post-metadata">

**Author:** ![michael.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael.zoom/32/37213_2.png) [@michael.zoom](https://devforum.zoom.us/u/michael.zoom)\
**Post date:** [May 5, 2020, 10:32pm UTC](https://devforum.zoom.us/t/urgent-api-token-signature-invalid/15325/4 "2020-05-05T22:32:03Z")

</div>

Glad to see everything is working @trevor_c, please know that anyone with Zoom Developer write or Admin access can go in and reset that secret. Let us know if you need any further help!

---

<div class="post-metadata">

**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\
**Post date:** [August 21, 2020, 9:03pm UTC](https://devforum.zoom.us/t/urgent-api-token-signature-invalid/15325/5 "2020-08-21T21:03:56Z")

</div>

Closed on August 21, 2020, 9:03pm UTC