# Zoom App OAuth with Client Credentials Grant Type? **URL:** \ **Category:** Zoom Apps\ **Created:** [April 12, 2022, 6:46am UTC](https://devforum.zoom.us/t/zoom-app-oauth-with-client-credentials-grant-type/67420 "2022-04-12T06:46:20Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![greyoung](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/greyoung/32/36232_2.png) [@greyoung](https://devforum.zoom.us/u/greyoung)\ **Post date:** [April 12, 2022, 6:46am UTC](https://devforum.zoom.us/t/zoom-app-oauth-with-client-credentials-grant-type/67420/1 "2022-04-12T06:46:20Z")
I noticed that it is possible in a client such as Postman to generate OAuth tokens using the Zoom App Client ID/Secret and **grant\_type** set to **client\_credentials**. Is that intentional? ---
**Author:** ![donte.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/donte.zoom/32/24412_2.png) [@donte.zoom](https://devforum.zoom.us/u/donte.zoom)\ **Post date:** [April 12, 2022, 5:56pm UTC](https://devforum.zoom.us/t/zoom-app-oauth-with-client-credentials-grant-type/67420/2 "2022-04-12T17:56:33Z")
Welcome, @greyoung, Thank you for posting in the Developer Forum. Yes, it is possible to generate an OAuth Token using the Zoom App Client ID and Secret. I am not aware of any restrictions placed on the kind of development/API tools that can used. Best, Donte ---
**Author:** ![greyoung](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/greyoung/32/36232_2.png) [@greyoung](https://devforum.zoom.us/u/greyoung)\ **Post date:** [April 12, 2022, 6:12pm UTC](https://devforum.zoom.us/t/zoom-app-oauth-with-client-credentials-grant-type/67420/3 "2022-04-12T18:12:07Z")
Hi @donte.zoom, Thanks for the reply, but it unfortunately does not answer my question. I was asking about whether the specific method I had used (i.e., generating OAuth tokens with the Client Credentials grant type) was in fact meant to be supported. I ask because this is not documented by you guys but seems a bit odd that it would be allowed in the context of a Zoom App. ---
**Author:** ![donte.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/donte.zoom/32/24412_2.png) [@donte.zoom](https://devforum.zoom.us/u/donte.zoom)\ **Post date:** [April 12, 2022, 11:19pm UTC](https://devforum.zoom.us/t/zoom-app-oauth-with-client-credentials-grant-type/67420/4 "2022-04-12T23:19:06Z")
Thanks for the clarification, @greyoung. You’re right, there is no mention of the current method you used in our Zoom Apps documentation. Would you be able to share a screenshot of how you are making the API request in Postman? Once received, I’ll verify supported methods and share what learn. Addendum Our Chatbot app does support **grant\_type** set to **client\_credentials**. Is it possible you are using the JWT or Chatbot Client ID/Secret? > **[Authorization and Authentication](https://marketplace.zoom.us/docs/guides/chatbots/installation-and-authentication/)** > > The Zoom Developer Platform is an open platform that allows third-party developers to build applications and integrations upon Zoom’s video-first unified communications platform. ---
**Author:** ![greyoung](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/greyoung/32/36232_2.png) [@greyoung](https://devforum.zoom.us/u/greyoung)\ **Post date:** [April 12, 2022, 11:44pm UTC](https://devforum.zoom.us/t/zoom-app-oauth-with-client-credentials-grant-type/67420/5 "2022-04-12T23:44:15Z")
Here’s the curl command that Postman says is equivalent: curl --location --request POST “[https://zoom.us/oauth/token](https://zoom.us/oauth/token)” --header “Content-Type: application/x-www-form-urlencoded” --data-urlencode “grant\_type=client\_credentials” --data-urlencode “client\_id=$ZOOM\_APP\_CLIENT\_ID” --data-urlencode “client\_secret=$ZOOM\_APP\_CLIENT\_SECRET” Where ZOOM\_APP\_CLIENT\_ID and ZOOM\_APP\_CLIENT\_SECRET can be set accordingly. ---
**Author:** ![donte.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/donte.zoom/32/24412_2.png) [@donte.zoom](https://devforum.zoom.us/u/donte.zoom)\ **Post date:** [April 13, 2022, 1:06am UTC](https://devforum.zoom.us/t/zoom-app-oauth-with-client-credentials-grant-type/67420/6 "2022-04-13T01:06:22Z")
I just tested on my end and was able to reproduce the behavior. I’ve since created an internal ticket for this as **grant\_type** set to **client\_credentials** is not supported for Zoom APPS. For your reference, the ticket tracking this issue is [ZOOM-366143]. Thanks for calling attention to this behavior, @greyoung! Regards, Donte ---
**Author:** ![prashant.et](https://avatars.discourse-cdn.com/v4/letter/p/c68b51/32.png) [@prashant.et](https://devforum.zoom.us/u/prashant.et)\ **Post date:** [August 1, 2023, 2:12pm UTC](https://devforum.zoom.us/t/zoom-app-oauth-with-client-credentials-grant-type/67420/7 "2023-08-01T14:12:19Z")
I noticed that it is possible in a client such as Postman to generate OAuth tokens using the Zoom App Client ID/Secret and **grant\_type** set to **client\_credentials** …I have got the access token .while I am using this access token for crate a meeting showing error { “code”: 124, “message”: “Invalid access token.” } Please suggest what is wrong here… or second option as per mention in following document need authorization step for access token generation is mandatory? > **[OAuth for user authorized apps](https://developers.zoom.us/docs/integrations/oauth/)** > > The Zoom Developer Platform is an open platform that allows third-party developers to build applications and integrations upon Zoom’s video-first unified communications platform. ---
**Author:** ![ttmraj](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/ttmraj/32/49749_2.png) [@ttmraj](https://devforum.zoom.us/u/ttmraj)\ **Post date:** [October 6, 2023, 6:37pm UTC](https://devforum.zoom.us/t/zoom-app-oauth-with-client-credentials-grant-type/67420/8 "2023-10-06T18:37:31Z")
Hi @donte.zoom , Did you get any reply from Zoom Support? I am also facing same issue.